SecurityOnlineDo Son
CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV
On July 27, 2026, CISA added two critical known exploited vulnerabilities (KEVs) to its catalog affecting Arista Networks VeloCloud and Fortinet FortiOS. The vulnerabilities include a high-severity remote code execution (RCE) flaw in VeloCloud (CVE-2026-16812) with a CVSS score of 10.0, and a persistence bypass in FortiOS (CVE-2025-68686) with a CVSS score of 5.9. Both vulnerabilities are actively exploited and patches are available. Organizations are advised to update their systems to the specified versions immediately to mitigate risks.
How the story developed
All 8 articles8 articles from 4 outlets over 89 days. This was the 2nd report, 6 hours after the first.
8 articles from 4 outlets since 27 Jul; 1 in the last 7 days.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 23 Oct · 10:59 UTC | SecurityWeek | Arista VeloCloud Flaw Marks Third Exploited Orchestrator Zero-Day |
| Mon 3 Aug · 03:01 UTC | SecurityOnline | Attackers Exploit VMware, WordPress Zero Days in New CVE Wave |
| Tue 28 Jul · 09:01 UTC | Security Affairs | U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog |
| Tue 28 Jul · 06:51 UTC | SecurityWeek | Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day |
| Tue 28 Jul · 01:12 UTC | CISA | CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud |
| Mon 27 Jul · 22:52 UTC | CISA | OS command injection flaw hits Arista VeloCloud, CISA issues alert |
| Mon 27 Jul · 22:32 UTC | SecurityOnline | CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV |
| Mon 27 Jul · 16:56 UTC | SecurityOnline | Arista Warns of Actively Exploited VeloCloud Orchestrator Bug |
Who reported 4 outlets
- SecurityOnline3
- CISA2
- SecurityWeek2
- Security Affairs1
- Arista Warns of Actively Exploited VeloCloud Orchestrator BugSecurityOnline · first report
- CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEVSecurityOnline · this article · 2 of 8