ChordNews
← All news

Arista patches actively exploited SQL injection zero-day in VeloCloud Orchestrator

By ChordNews · First written

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Image: thehackernews.com
Comments 0

Summary

Arista Networks has released security updates to patch a zero-day vulnerability in VeloCloud Orchestrator (VCO) On-Prem deployments that is being actively exploited in attacks. The Hacker News reports the flaw is a SQL injection in the central management system for VeloCloud SD-WAN networks. It lets anyone who can log in, even with a read-only customer account, gain operator privileges, the top level of control over the orchestrator. Arista described the issue in an advisory published on October 22.

Later: Cisco patches firewall zero-day that attackers exploit to crash SSL VPN devices

Timeline

  1. BleepingComputer

    Source ↗

    Reports that Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.

  2. The Hacker News

    Source ↗

    Reports that attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator, citing the company's October 22 advisory, and that the flaw lets anyone who can log in, even with a read-only customer account, gain operator privileges.

Comments

No comments yet.

    to like and comment.

    © 2026 ChordNews