<![CDATA[Arista patches new VeloCloud Orchestrator zero-day exploited in attacks]]>Arista Networks has released security updates to address an actively exploited zero-day vulnerability impacting VeloCloud Orchestrator (VCO) On-Prem deployments. The company confirmed the flaw is being exploited in the wild, making patching a priority for organizations running the on-premises version of the orchestrator.

The affected product is VeloCloud Orchestrator On-Prem, and administrators are urged to apply the available updates as soon as possible. Arista has not disclosed specific technical details about the exploitation activity in the advisory.

  • Identify any VeloCloud Orchestrator On-Prem instances in your environment
  • Apply the latest security updates from Arista without delay
  • Monitor for signs of compromise and review access logs on exposed VCO deployments

Given that the vulnerability is under active exploitation, delaying patching leaves on-prem orchestrators exposed to potential attack. Organizations should treat this with urgency and verify that all VCO instances are running the fixed release.

Source: BleepingComputer

Does your organization run VeloCloud Orchestrator on-prem, and have you already scheduled the update?

]]>https://xploitlk.com/topic/754/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacksRSS for NodeTue, 27 Oct 2026 07:48:41 GMTThu, 22 Oct 2026 18:30:17 GMT60