SecurityOnlineDo Son
Arista Warns of Actively Exploited VeloCloud Orchestrator Bug
Arista has confirmed that CVE-2026-16812, a command injection vulnerability in VeloCloud Orchestrator (VCO), is currently being exploited. This flaw allows remote attackers to execute OS commands without authentication, scoring a CVSS of 10.0. Affected versions include VCO 5.2.x, 6.1.x, 6.4.x, and 7.0.x prior to specified patches. Arista has issued patches and recommends urgent upgrading.
Two additional lower-severity vulnerabilities (CVE-2026-17191 and CVE-2026-17192) have been identified, requiring authenticated sessions but are not known to be actively exploited. Users are advised to restrict access and review logs for suspicious activity.
How the story developed
All 8 articles8 articles from 4 outlets over 89 days. This was the first report.
8 articles from 4 outlets since 27 Jul; 1 in the last 7 days.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 23 Oct · 10:59 UTC | SecurityWeek | Arista VeloCloud Flaw Marks Third Exploited Orchestrator Zero-Day |
| Mon 3 Aug · 03:01 UTC | SecurityOnline | Attackers Exploit VMware, WordPress Zero Days in New CVE Wave |
| Tue 28 Jul · 09:01 UTC | Security Affairs | U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog |
| Tue 28 Jul · 06:51 UTC | SecurityWeek | Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day |
| Tue 28 Jul · 01:12 UTC | CISA | CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud |
| Mon 27 Jul · 22:52 UTC | CISA | OS command injection flaw hits Arista VeloCloud, CISA issues alert |
| Mon 27 Jul · 22:32 UTC | SecurityOnline | CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV |
| Mon 27 Jul · 16:56 UTC | SecurityOnline | Arista Warns of Actively Exploited VeloCloud Orchestrator Bug |
Who reported 4 outlets
- SecurityOnline3
- CISA2
- SecurityWeek2
- Security Affairs1
- Arista Warns of Actively Exploited VeloCloud Orchestrator BugSecurityOnline · first report · this article · 1 of 8