Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal…
Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Arista Networks
- Product
- VeloCloud
- CVSS
- 10.0
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- Edge / VPN / firewall
Why it ranks 81 (Critical)
- CISA KEV listed
- CVSS 10.0 critical
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Arista Networks)
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-16812 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.