Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For

The Hacker Newsで読む

2026/10/23 04:05、The Hacker Newsが「Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks」を公開しました (種別: セキュリティニュース)。重大度は「緊急」(critical) です。