The Hacker News · 10/22/2026

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Arista VeloCloud Orchestrator zero-day SQL injection (CVE unspecified) exploited in wild. Read-only customer account escalates to operator privileges; actively targeted.

Read original coverage