Tag: arista
6 articles

Arista Discloses Zero-Day SQL Flaw in VeloCloud Orchestrator
A critical zero-day SQL flaw in Arista's VeloCloud Orchestrator has been actively exploited in the wild, allowing attackers to gain top-level control with a 9.9 CVSS score. This severe vulnerability can be triggered by any user with a valid login, including those with limited Enterprise Read Only role access.

Arista Warns of Active Exploits in VeloCloud Orchestrator Flaw
Arista warns of a critical vulnerability in its VeloCloud Orchestrator, tracked as CVE-2026-93952, which is being actively exploited by attackers and could allow them to gain unauthorized access to sensitive data and devices. This severe flaw has been assigned a CVSS 3.1 score of 10.0, indicating a high risk of compromise.

Arista Disrupts Actively Exploited VeloCloud Bug
Arista warns of a critical vulnerability in VeloCloud Orchestrator On-Prem, which is being actively exploited by hackers, putting the confidentiality, integrity, and availability of sensitive data at risk. This severe OS command injection flaw, scoring a perfect 10.0 on the CVSS scale, allows unauthorized access to internal functionality, compromising entire networks.

Arista VeloCloud Flaw Exposes On-Premises Networks to Active Exploitation
A critical security flaw in Arista VeloCloud, tracked as CVE-2026-16812, is under active exploitation, allowing remote attackers to access sensitive internal functionality and potentially leading to arbitrary code execution. This maximum-severity vulnerability could compromise the confidentiality, integrity, and availability of on-premises networks.

Arista Disrupts Zero-Day Attacks on VeloCloud Orchestrator
Arista has patched a critical zero-day vulnerability in its VeloCloud Orchestrator that allowed attackers to launch devastating, maximum-severity attacks with just network access - no login credentials required. The flaw, rated 10.0 in severity, could compromise the confidentiality, integrity, and availability of sensitive data managed by the orchestrator.

CISA Flags Cisco, Chrome, Arista Flaws as Actively Exploited
Stay safe online: CISA has flagged serious vulnerabilities in Cisco, Chrome, and Arista that are being actively exploited by hackers, so take action now to protect your systems. These flaws could let attackers gain unauthorized access, making it crucial to update your software ASAP.