Hackers are actively exploiting a critical SQL injection flaw in VeloCloud Orchestrator (VCO) that allows logged-in users to gain superuser operator access. Arista Networks disclosed the vulnerability on October 22, 2026, warning that successful attacks could compromise the orchestrator, its host, and the data it manages. Arista has already patched hosted deployments, including Dedicated instances. […]
This article has been indexed from Cyber Security News
Read the original article:
Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access