Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access

Hackers are actively exploiting a critical SQL injection flaw in VeloCloud Orchestrator (VCO) that allows logged-in users to gain superuser operator access. Arista Networks disclosed the vulnerability on October 22, 2026, warning that successful attacks could compromise the orchestrator, its host, and the data it manages.

Arista has already patched hosted deployments, including Dedicated instances.…

Abbreviated excerpt as provided by the publisher; the full article is at the canonical source. Attributed to Cyber Security News · Limited verification; verify facts against the linked source. Read the full article on cybersecuritynews.com.

Source published: 23 Oct 2026, 07:27 PM IST. Source facts take precedence over AI interpretation.