Arista VeloCloud Orchestrator

Reported Context (17)

Black Lotus Labs also observed confirmed zero-day campaigns targeting Versa Director, N-Able N-Central, Cisco Catalyst SD-WAN and VeloCloud Orchestrator. Volt Typhoon Rotates Ephemeral Infrastructure to Preserve Access, Researchers Say
Arista VeloCloud Orchestrator: CVE-2026-93952 is a maximum-severity flaw affecting the system used to configure SD-WAN Edge devices. InfraTrust Report Warns of Exploited Flaws in Critical Network Infrastructure
on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in CISA Adds Two Actively Exploited Collabora Online and Arista VeloCloud Flaws to KEV
[50:34] Arista Velocloud Orchestrator has a CVSS Cyber Brief: Teams Phishing Detection, PHP Flaws and Patient Data Exposure
CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnerability CISA Adds Actively Exploited Arista VeloCloud Orchestrator SQL Injection Flaw to KEV Catalog

CVE (168)

Malware (10)

People (5)

Threat Actors (18)

MITRE ATT&CK (14)

Vendors (45)

Products (144)

Tools (10)

Industries (14)

Countries (7)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.