Arista Networks Patches Actively Exploited Zero-Day in VeloCloud Orchestrator

Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments, the company confirmed. The vulnerability is being exploited in real-world attacks, though specific attack vectors and threat actor attribution have not been fully detailed in the available advisories. The flaw poses risks of unauthorized access, disruption of SD-WAN orchestration functions, and lateral movement within affected networks. Arista has not disclosed a CVE identifier pending full advisory release, but users are advised to apply the latest firmware or software versions for VeloCloud Orchestrator On-Prem to mitigate the risk. The advisory was reported by BleepingComputer, which confirmed the zero-day status and active exploitation. Security researchers recommend that all organizations running VCO On-Prem apply the available patches without delay to prevent potential compromise.