Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Nyxfrom the orchestrator-privilege-creep dept.
Arista disclosed a critical SQL injection vulnerability in VeloCloud Orchestrator, the management hub for its SD-WAN networks. Attackers with even read-only access can escalate to full operator privileges. Organizations running VeloCloud should prioritize patching, as the flaw is already being exploited in the wild.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.