> TritonInfoSec News
Home / Jul 28, 2026 / Story
0
#3 BleepingComputer general July 27, 2026 at 22:49 UTC

Arista patches VeloCloud Orchestrator zero-day exploited in attacks

By Lawrence Abrams

AI Summary

Arista patched a maximum-severity (CVSS 10.0) command injection zero-day in on-premises VeloCloud Orchestrator deployments that is actively being exploited in the wild. Network administrators running on-prem VeloCloud Orchestrator instances should apply the patch immediately given active exploitation and the critical severity rating.

Read full article → https://www.bleepingcomputer.com/news/security/ari…

Relevance score: 86.0/100

# More from July 28

  1. 1
    Coca-Cola confirms data theft in Fairlife ransomware attack BleepingComputer
  2. 2
    Ernst & Young data breach claimed by ShinyHunters extortion gang BleepingComputer
  3. 4
    DentaQuest Data Breach Potentially Impacts Over 23 Million People SecurityWeek
  4. 5
    New Certighost PoC exploit lets attackers hijack Windows domains BleepingComputer
  5. 6
    Hackers target US firms in FastJson RCE zero-day attacks BleepingComputer
  6. 7
    AI Agent Drives Espionage Attack on Thai Ministry of Finance Dark Reading
  7. 8
    PTC Windchill Vulnerability Exploited in Ransomware Campaign SecurityWeek
  8. 9
    Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw The Hacker News
  9. 10
    Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials SecurityWeek