CISA
CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud
The Known Exploited Vulnerabilities (KEV) Catalog, maintained by CISA, serves as a crucial resource for the cybersecurity community to manage and prioritize vulnerabilities that have been actively exploited in the wild. The catalog includes vulnerabilities such as CVE-2026-16812, an OS command injection vulnerability in Arista VeloCloud Orchestrator, which could allow remote attackers to compromise data integrity and availability.
Organizations are encouraged to apply mitigations per vendor guidelines and adhere to CISA’s BOD 26-04 for security updates. Users can also nominate new vulnerabilities for catalog inclusion and access the catalog in various formats including CSV and JSON.
How the story developed
All 8 articles8 articles from 4 outlets over 89 days. This was the 4th report, 8 hours after the first.
8 articles from 4 outlets since 27 Jul; 1 in the last 7 days.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 23 Oct · 10:59 UTC | SecurityWeek | Arista VeloCloud Flaw Marks Third Exploited Orchestrator Zero-Day |
| Mon 3 Aug · 03:01 UTC | SecurityOnline | Attackers Exploit VMware, WordPress Zero Days in New CVE Wave |
| Tue 28 Jul · 09:01 UTC | Security Affairs | U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog |
| Tue 28 Jul · 06:51 UTC | SecurityWeek | Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day |
| Tue 28 Jul · 01:12 UTC | CISA | CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud |
| Mon 27 Jul · 22:52 UTC | CISA | OS command injection flaw hits Arista VeloCloud, CISA issues alert |
| Mon 27 Jul · 22:32 UTC | SecurityOnline | CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV |
| Mon 27 Jul · 16:56 UTC | SecurityOnline | Arista Warns of Actively Exploited VeloCloud Orchestrator Bug |
Who reported 4 outlets
- SecurityOnline3
- CISA2
- SecurityWeek2
- Security Affairs1
- Arista Warns of Actively Exploited VeloCloud Orchestrator BugSecurityOnline · first report
- CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloudCISA · this article · 4 of 8