Back to all news
Security

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

The Hacker News·October 22, 2026·1 min read
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said on October 22. The flaw lets anyone who can log in, even with a read-only customer account, gain operator privileges, the top level of control.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store