Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

Attackers Exploit Command Injection Flaw in Arista VeloCloud

Part of the VeloCloud story · since 27 Jul

Quiet for 14 weekslast report 28 Jul7 articles5 outlets
27 Jul · SecurityOnline first16 Sep3 OctNowThis article5th of 7
  • Mon 27 Jul, 16:56 UTC. SecurityOnline, first report. Arista Warns of Actively Exploited VeloCloud Orchestrator Bug. Cites a CVE in CISA KEV.
  • Mon 27 Jul, 22:32 UTC. SecurityOnline. CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV. Cites a CVE in CISA KEV.
  • Mon 27 Jul, 22:52 UTC. CISA, its first report on the story. OS command injection flaw hits Arista VeloCloud, CISA issues alert. Cites a CVE in CISA KEV.
  • Tue 28 Jul, 01:12 UTC. CISA. CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud. Cites a CVE in CISA KEV.
  • Tue 28 Jul, 05:41 UTC. The Hacker News, its first report on the story. Attackers Exploit Command Injection Flaw in Arista VeloCloud. This article, 5th of 7.
  • Tue 28 Jul, 06:51 UTC. SecurityWeek, its first report on the story. Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day. Cites a CVE in CISA KEV.
  • Tue 28 Jul, 09:01 UTC. Security Affairs, its first report on the story. U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.

The article discusses a critical command injection vulnerability in the Arista VeloCloud Orchestrator, which cyber attackers are exploiting. It highlights the nature of the vulnerability, its implications for security, and the potential risks for organizations using the affected software. The post is authored by Ravie Lakshmanan and published on July 28, 2026. It serves as an important alert for IT security professionals to review their systems and apply necessary updates to mitigate this threat.

How the story developed

All 7 articles
Quiet for 14 weekslast report 28 Jul7 articles5 outlets

7 articles from 5 outlets since 27 Jul. Quiet since 28 Jul. This was the 5th report, 13 hours after the first.

Now27 Jul2829First reportSecurityOnline · 27 Jul, 16:56This article5th of 7 · day 1
  • Mon 27 Jul, 16:56 UTC. SecurityOnline, first report. Arista Warns of Actively Exploited VeloCloud Orchestrator Bug. Cites a CVE in CISA KEV.
  • Mon 27 Jul, 22:32 UTC. SecurityOnline. CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV. Cites a CVE in CISA KEV.
  • Mon 27 Jul, 22:52 UTC. CISA, its first report on the story. OS command injection flaw hits Arista VeloCloud, CISA issues alert. Cites a CVE in CISA KEV.
  • Tue 28 Jul, 01:12 UTC. CISA. CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud. Cites a CVE in CISA KEV.
  • Tue 28 Jul, 05:41 UTC. The Hacker News, its first report on the story. Attackers Exploit Command Injection Flaw in Arista VeloCloud. This article, 5th of 7.
  • Tue 28 Jul, 06:51 UTC. SecurityWeek, its first report on the story. Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day. Cites a CVE in CISA KEV.
  • Tue 28 Jul, 09:01 UTC. Security Affairs, its first report on the story. U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 7 articles as a list
  1. Mon 27 JulDay 03
    1. Arista Warns of Actively Exploited VeloCloud Orchestrator Bug16:56 · SecurityOnline · First report · Known exploited CVE
    2. CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV22:32 · SecurityOnline · Known exploited CVE
    3. OS command injection flaw hits Arista VeloCloud, CISA issues alert22:52 · CISA · official · CISA alert · Known exploited CVE
  2. Tue 28 JulDay 14
    1. CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud01:12 · CISA · official · Known exploited CVE
    2. Attackers Exploit Command Injection Flaw in Arista VeloCloud05:41 · The Hacker News · This article, 5th of 7
    3. Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day06:51 · SecurityWeek · Known exploited CVE
    4. U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog09:01 · Security Affairs · Known exploited CVE

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in