Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw Source: The Hacker News A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitra Read original