critical
Arista VeloCloud Orchestrator: Privilege escalation and SQL injection possible
CERT-Bund (BSI) reports one vulnerability in Arista VeloCloud Orchestrator with severity critical. The stated impact is privilege escalation and SQL injection. The full description, affected versions and recommended action are available from CERT-Bund (BSI).
- Attack vector
- over the network
- Access needed
- yes, an account is needed
What this means for you
Anyone who already has access can widen their privileges. This mainly affects environments with many accounts. Take the opportunity to check which administrator accounts are still needed at all.
Original source
Insights
More articles
Weekly situation, week 43: 86 advisories, 11 critical
Between 18 Oct and 25 Oct 2026 our sources recorded 86 advisories: 11 critical, 75 high.
Weekly situation, week 42: 107 advisories, 17 critical
Between 11 Oct and 18 Oct 2026 our sources recorded 107 advisories: 17 critical, 90 high.
Weekly situation, week 41: 99 advisories, 17 critical
Between 4 Oct and 11 Oct 2026 our sources recorded 99 advisories: 17 critical, 82 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.