## Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

- 種別: news
- 重大度: critical
- 関連技術: arista
- 公開日時: 2026-10-22T19:05:17.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-5a3446099074

Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For