{"id":"thehackernews-5a3446099074","seq":308792,"kind":"news","title":"Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks","url":"https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html","permalink":"https://vulnpulse.app/items/thehackernews-5a3446099074","summary":"Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For","severity":"critical","techs":["arista"],"cves":[],"tags":["security"],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-22T19:05:17.000Z","fetched_at":"2026-10-22T20:06:52.279Z"}