Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

Arista Networks disclosed a critical OS injection vulnerability in its VeloCloud Orchestrator platform, tracked as CVE-2026-16812, which has already been exploited in attacks. The flaw allows unauthenticated attackers to access privileged functions remotely, potentially compromising data confidentiality, integrity, and availability. Patches are available in versions 5.2.3.14, 6.1.3.4, 6.4.2.4, and 7.0.0.1. CISA added the vulnerability to its KEV catalog, urging immediate remediation.