CVE Tools
Track your stack

Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

SecurityWeekBy Ionut Arghire

Reported exploitedVeloCloud Orchestrator

Our summary

Arista Networks disclosed a critical OS injection vulnerability in its VeloCloud Orchestrator platform, tracked as CVE-2026-16812, which has already been exploited in attacks. The flaw allows unauthenticated attackers to access privileged functions remotely, potentially compromising data confidentiality, integrity, and availability. Patches are available in versions 5.2.3.14, 6.1.3.4, 6.4.2.4, and 7.0.0.1. CISA added the vulnerability to its KEV catalog, urging immediate remediation.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. SecurityWeekThai Broadband Provider Hacked via Fortinet VulnerabilityCVE-2022-42475, CVE-2023-27997 +1
  2. Qualys Security BlogFortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate DevicesCVE-2022-42475, CVE-2023-27997 +1
  3. Dark ReadingOperation Escaneo Signals Shift in LatAm Threat LandscapeCVE-2022-42475, CVE-2023-27997 +1
  4. The Hacker NewsAttackers Exploit Arista VeloCloud Orchestrator Command Injection FlawCVE-2025-68686, CVE-2026-16812
  5. BleepingComputerArista patches actively exploited VeloCloud Orchestrator zero-dayCVE-2026-16812
  6. The Hacker NewsNew CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based SetupsCVE-2026-16812
  7. The Hacker News3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber CredentialsCVE-2024-21762
  8. BleepingComputerArista patches VeloCloud Orchestrator zero-day exploited in attacksCVE-2026-16812
  9. The Hacker NewsNew SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksCVE-2024-21762
  10. Kaspersky SecurelistStrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoaderCVE-2024-21762

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store