CVE-2026-16812: Critical Command Injection in Arista VeloCloud Orchestrator
ID: 551271de-8abb-5194-8418-b4bde2a77e20
STIX ID: report--551271de-8abb-5194-8418-b4bde2a77e20
Feed Name: Resecurity
Threat Score
**CVE-2026-16812 — Critical unauthenticated OS command injection in on‑premises Arista VeloCloud Orchestrator (VCO) allowing remote code execution and full management‑plane compromise; actively exploited in the wild and added to CISA KEV, with fixed VCO releases available and urgent remediation and forensic actions recommended.**
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.