VeloCloud Orchestrator
1 CISA KEV deadline is open. The nearest: CVE-2026-114625 in VeloCloud Orchestrator, due Mon 26 Oct. Coverage is above its usual rate: 8 articles in 7 days, against a weekly average of 0.6.
Tracked since 27 Jul · latest article Mon 26 Oct · RSS
Exploited, by due date
CSV downloadDeadlines passed
8 articles in the last 7 days. The weekly average over the 8 weeks before was 0.6.
20 articles from 6 outlets since 27 Jul; 8 in the last 7 days.
- Article
- First report
- Official notice
Show as table
Who reported 6 outlets, last 12 months
- SecurityOnline7
- CISA4
- Security Affairs3
- SecurityWeek3
- The Hacker News2
- SOCRadar1
- Weekly report flags PHP and FortiSIEM flaws under attackSecurityOnline
- CISA flags exploited Arista VeloCloud flaw that lets attackers impersonate superusersSecurity Affairs
- CISA Warns of Active Attacks on Nextcloud and Arista FlawsThe Hacker News
- CISA Confirms Active Attacks on Arista VeloCloud OrchestratorCISA · official notice
- Arista VeloCloud Flaw Marks Third Exploited Orchestrator Zero-DaySecurityWeek
- Arista VeloCloud Orchestrators Hit by Exploited SQL Injection FlawSOCRadar
- Arista VeloCloud Zero Day Exploited to Gain Superuser AccessThe Hacker News
- Arista VeloCloud flaw under attack lets users seize superuser accessSecurityOnline
- Critical Flaws Put VeloCloud, BIG-IP and Rancher Systems at RiskSecurityOnline
- CISA Warns of Active Attacks on Check Point and F5 FlawsSecurity Affairs
All CVEs in coverage
3How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.