Tag: velocloud orchestrator
4 articles
Arista Discloses Zero-Day SQL Flaw in VeloCloud Orchestrator
A critical zero-day SQL flaw in Arista's VeloCloud Orchestrator has been actively exploited in the wild, allowing attackers to gain top-level control with a 9.9 CVSS score. This severe vulnerability can be triggered by any user with a valid login, including those with limited Enterprise Read Only role access.
Arista Disrupts Actively Exploited Zero-Day in VeloCloud Orchestrator
Arista Networks has sounded the alarm on a critical zero-day vulnerability, CVE-2026-93952, that's being actively exploited in the wild, allowing attackers to access sensitive internal functionality in VeloCloud Orchestrator. This severe flaw can be easily exploited with low complexity, making it a high-risk threat.
Arista Warns of Active Exploits in VeloCloud Orchestrator Flaw
Arista warns of a critical vulnerability in its VeloCloud Orchestrator, tracked as CVE-2026-93952, which is being actively exploited by attackers and could allow them to gain unauthorized access to sensitive data and devices. This severe flaw has been assigned a CVSS 3.1 score of 10.0, indicating a high risk of compromise.
Arista Disrupts Zero-Day Attacks on VeloCloud Orchestrator
Arista has patched a critical zero-day vulnerability in its VeloCloud Orchestrator that allowed attackers to launch devastating, maximum-severity attacks with just network access - no login credentials required. The flaw, rated 10.0 in severity, could compromise the confidentiality, integrity, and availability of sensitive data managed by the orchestrator.