Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.

Covered by 3 publishers within 17 hours of the first report.

Summary from BleepingComputer.

Reporting3

BC BleepingComputer Arista patches new VeloCloud Orchestrator zero-day exploited in attacks · Sergiu Gatlan 1:18 PM

THN The Hacker News Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks · info@thehackernews.com (The Hacker News) 3:05 PM

SW SecurityWeek Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months · Ionut Arghire 5:58 AM

Related

BC Ivanti patches two flaws after attacker chains three zero-days October 13

CS Prolific Chinese espionage group exploits BeyondTrust zero-day October 15

CSN CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials October 14

BC Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days October 13

Topics Zero-day vulnerabilities