CVE Tools
Sign in
Back to feed
Exploited in the wild VeloCloud Orchestrator rce Arista Networks network-edge

Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

SecurityWeek·By Ionut Arghire··2 min read
CVE Tools coverage

Arista Networks disclosed a critical OS injection vulnerability in its VeloCloud Orchestrator platform, tracked as CVE-2026-16812, which has already been exploited in attacks. The flaw allows unauthenticated attackers to access privileged functions remotely, potentially compromising data confidentiality, integrity, and availability. Patches are available in versions 5.2.3.14, 6.1.3.4, 6.4.2.4, and 7.0.0.1. CISA added the vulnerability to its KEV catalog, urging immediate remediation.

Open on SecurityWeek

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure