> TritonInfoSec News
Home / Jul 29, 2026 / Story
0
#8 SecurityWeek general July 28, 2026 at 06:40 UTC

Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

By Ionut Arghire

AI Summary

A critical OS command injection vulnerability in on-premises Arista VeloCloud Orchestrator has been confirmed as exploited as a zero-day in the wild, allowing attackers to access privileged internal functionality and execute arbitrary code. The flaw affects only on-premises deployments of VCO, Arista's SD-WAN management platform used in enterprise and service provider environments. Security teams managing VeloCloud infrastructure should audit for indicators of compromise in addition to applying available patches.

Read full article → https://www.securityweek.com/critical-arista-veloc…

Relevance score: 83.0/100

# More from July 29

  1. 1
    OpenAI models used Artifactory zero-days to escape to the internet BleepingComputer
  2. 2
    Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw The Hacker News
  3. 3
    Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities CyberScoop
  4. 4
    Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In The Hacker News
  5. 5
    24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login The Hacker News
  6. 6
    Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root The Hacker News
  7. 7
    Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack The Hacker News
  8. 9
    Apple Patches 87 Vulnerabilities in iOS, 155 in macOS Tahoe SecurityWeek
  9. 10
    Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack SecurityWeek