Skip to main content
Apexward Pulse
Type Vulnerability

Arista VeloCloud Orchestrator

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

1 source

At a glance

Low
30-day window, from the last update
Evidence-weighted, not popularity
Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

  • Do not treat uncorroborated claims as confirmed breaches.

Questions to ask IT

  • Do we use the Arista VeloCloud Orchestrator products this covers, and which versions?
  • If it is not yet patched, what mitigation is in place, and will the fix be done by 21 Nov?

Next steps

  1. Confirm whether this affects systems or suppliers in your estate

Summary

  • Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.

Read the original reportBleepingComputer(opens in a new tab)

Pulse

Last checked 1 Nov · Recheck overdue since 5 Nov 2026, 06:33 UK time · 1 quiet check collapsed

  1. Story22 Oct 2026, 19:17 UK time · 22 Oct

    Linked reporting from BleepingComputer (independent original reporting).

    Read source (BleepingComputer)

1 entry so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

  • ProbableSummary fact75% confidence

    Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.