Skip to main content

Tag: arista

6 articles

Network operations center with a console in the background and an unoccupied workstation in the foreground.

Arista Discloses Zero-Day SQL Flaw in VeloCloud Orchestrator

A critical zero-day SQL flaw in Arista's VeloCloud Orchestrator has been actively exploited in the wild, allowing attackers to gain top-level control with a 9.9 CVSS score. This severe vulnerability can be triggered by any user with a valid login, including those with limited Enterprise Read Only role access.

Analyst 207
Technicians work in a network operations center with server equipment and daylight from a large window.

Arista Warns of Active Exploits in VeloCloud Orchestrator Flaw

Arista warns of a critical vulnerability in its VeloCloud Orchestrator, tracked as CVE-2026-93952, which is being actively exploited by attackers and could allow them to gain unauthorized access to sensitive data and devices. This severe flaw has been assigned a CVSS 3.1 score of 10.0, indicating a high risk of compromise.

Analyst 207
Network management system setup with large computer screen and servers in a brightly-lit data center environment.

Arista Disrupts Actively Exploited VeloCloud Bug

Arista warns of a critical vulnerability in VeloCloud Orchestrator On-Prem, which is being actively exploited by hackers, putting the confidentiality, integrity, and availability of sensitive data at risk. This severe OS command injection flaw, scoring a perfect 10.0 on the CVSS scale, allows unauthorized access to internal functionality, compromising entire networks.

Analyst 207
Network operations center with a large blank screen on a workstation amidst cables and servers.

Arista VeloCloud Flaw Exposes On-Premises Networks to Active Exploitation

A critical security flaw in Arista VeloCloud, tracked as CVE-2026-16812, is under active exploitation, allowing remote attackers to access sensitive internal functionality and potentially leading to arbitrary code execution. This maximum-severity vulnerability could compromise the confidentiality, integrity, and availability of on-premises networks.

Analyst 207
Network control room with large screens displaying abstracted interface.

Arista Disrupts Zero-Day Attacks on VeloCloud Orchestrator

Arista has patched a critical zero-day vulnerability in its VeloCloud Orchestrator that allowed attackers to launch devastating, maximum-severity attacks with just network access - no login credentials required. The flaw, rated 10.0 in severity, could compromise the confidentiality, integrity, and availability of sensitive data managed by the orchestrator.

Analyst 207
Technicians work in a brightly lit network operations room with a central router or switch surrounded by equipment and…

CISA Flags Cisco, Chrome, Arista Flaws as Actively Exploited

Stay safe online: CISA has flagged serious vulnerabilities in Cisco, Chrome, and Arista that are being actively exploited by hackers, so take action now to protect your systems. These flaws could let attackers gain unauthorized access, making it crucial to update your software ASAP.

Analyst 207