SecurityWeekIonut Arghire
Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day
Arista Networks released patches for a critical OS injection vulnerability (CVE-2026-16812) in its VeloCloud Orchestrator (VCO) management platform, which has a CVSS score of 10 and is being exploited as a zero-day. The flaw allows remote attackers to access privileged functionalities without special configuration or authentication. Recommended actions for system defenders include reviewing web access logs for unusual activity and preserving logs for forensic analysis if compromise is suspected.
The US Cybersecurity and Infrastructure Security Agency (CISA) included this vulnerability in its Known Exploited Vulnerabilities catalog, urging federal agencies to patch it within three days.
How the story developed
All 8 articles8 articles from 4 outlets over 89 days. This was the 5th report, 14 hours after the first.
8 articles from 4 outlets since 27 Jul; 1 in the last 7 days.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 23 Oct · 10:59 UTC | SecurityWeek | Arista VeloCloud Flaw Marks Third Exploited Orchestrator Zero-Day |
| Mon 3 Aug · 03:01 UTC | SecurityOnline | Attackers Exploit VMware, WordPress Zero Days in New CVE Wave |
| Tue 28 Jul · 09:01 UTC | Security Affairs | U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog |
| Tue 28 Jul · 06:51 UTC | SecurityWeek | Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day |
| Tue 28 Jul · 01:12 UTC | CISA | CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud |
| Mon 27 Jul · 22:52 UTC | CISA | OS command injection flaw hits Arista VeloCloud, CISA issues alert |
| Mon 27 Jul · 22:32 UTC | SecurityOnline | CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV |
| Mon 27 Jul · 16:56 UTC | SecurityOnline | Arista Warns of Actively Exploited VeloCloud Orchestrator Bug |
Who reported 4 outlets
- SecurityOnline3
- CISA2
- SecurityWeek2
- Security Affairs1
- Arista Warns of Actively Exploited VeloCloud Orchestrator BugSecurityOnline · first report
- Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-DaySecurityWeek · this article · 5 of 8