Arista releases patches for actively exploited VeloCloud Orchestrator zero‑day

Arista Networks issued security updates to fix a critical SQL‑injection zero‑day in its VeloCloud Orchestrator (VCO) on‑prem deployments. The flaw, disclosed in an advisory on October 22, lets anyone with read‑only login gain operator privileges and has been observed in the wild. The patches address the actively exploited vulnerability.

Why it matters: Network engineers must apply the patches to prevent attackers from taking full control of SD‑WAN management systems.

More in Security

Security12h ago4 sources

Quest Diagnostics confirms breach exposing patient records via Quanum lab system

TechCrunch + 3 more

Security11h ago2 sources

FCC bans dashcam and wireless video transmitter with Huawei-made AI chips

The Record + 1 more