ARISTA PATCHES CRITICAL VELOCLOUD ZERO-DAY

SECURITY DESK■ 1 MIN READ

MON, JUL 27, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Arista has released a patch for a maximum-severity command injection vulnerability in VeloCloud Orchestrator that is currently being exploited in active attacks.

The flaw affects on-premises VeloCloud Orchestrator deployments. Command injection vulnerabilities allow attackers to execute arbitrary commands on affected systems, potentially granting full control of the network infrastructure. VeloCloud Orchestrator is used to manage SD-WAN deployments across enterprise networks. The vulnerability's active exploitation indicates attackers are actively targeting organizations using on-premises versions of the platform. Arista has not disclosed specific technical details about the vulnerability or attack methods in early disclosures. Organizations running VeloCloud Orchestrator should prioritize applying the patch to affected systems. This marks another critical vulnerability in widely-deployed networking infrastructure, following similar high-severity issues in other SD-WAN and network management platforms.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P728AI BREACHES SPARK SAFETY REVIEW CALLS

Multiple security breaches at major AI companies have intensified demands for stricter safety protocols. Infiltrations at Hugging Face, Anthropic, and Meta have raised concerns about AI-enabled cyber attacks.

JUST NOW— AI Desk

P727UK NAVY DISCONNECTS DRONE CAMERAS AFTER CHINA LINK FOUND

The UK Royal Navy removed internet connectivity from drone cameras after discovering they were sending periodic communications to an IP address in China. The drones, fitted with Chinese-made components, were being prepared for use by special forces in Gulf operations.

2H AGO— Industry Desk

P721EVERYTHING YOU DO IS BEING RECORDED

A new Atlantic investigation reveals the extent of AI-powered surveillance through wearable devices and countermeasures being developed to combat constant recording.

8H AGO— Industry Desk

P714ADVERSARIAL PATTERNS BLIND SURVEILLANCE CAMERAS

A security researcher has developed an algorithm that generates computer-generated patterns capable of evading detection by surveillance cameras. The technique can hide people, faces, and vehicles from AI-powered monitoring systems.

17H AGO— Security Desk

◄ BACK TO NEWS

ARISTA PATCHES CRITICAL VELOCLOUD ZERO-DAY

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF