Arista patches actively exploited VeloCloud Orchestrator zero-day

Arista Networks has released security patches addressing a zero-day vulnerability in VeloCloud Orchestrator (VCO) On-Prem deployments. The flaw is being actively exploited in the wild, making it a high-priority security concern for organizations running on-premises VCO installations. Arista Networks has responded by issuing patches to remediate the vulnerability. The article highlights the urgency of applying these patches given the active exploitation status. No specific CVE identifier was mentioned in the available content snippet. Affected organizations are advised to update their VeloCloud Orchestrator deployments immediately to mitigate potential compromise. This incident underscores the risks associated with network orchestration platforms being targeted by threat actors.