Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-28 04:43 UTC
Importiert: 2026-08-03 10:31 UTC
CVSS: 10.0
Quelle-ID: thn_global
uid_hash: 77db5cfd38d5abc95ffe41dac60784a489facac74faeb347467c8e28eef27bd5

The Hacker News

Inhalt

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild.

The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution.

"VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-16812	CRITICAL	10	CRITICAL	10			2026-07-27

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste