vulnerability
Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months
CriticalCVSS 10.0KEVEPSS 1%
Summary
Arista Networks has released patches for a critical zero-day vulnerability (CVE-2026-114625) in its VeloCloud Orchestrator (VCO) management tool. The issue has been actively exploited, and Arista urges users to update their on-premises installations immediately.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data