Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Arista has issued an advisory warning of an actively exploited zero-day SQL injection vulnerability in its VeloCloud Orchestrator (VCO), the central management platform for VeloCloud SD-WAN networks. The flaw allows any authenticated user, even those with read-only customer accounts, to escalate privileges to operator level, the highest control tier. The advisory was published on October 22. No CVE identifier is mentioned in the available content. The vulnerability poses significant risk to organizations relying on VeloCloud SD-WAN infrastructure for network management. Active exploitation has been confirmed, making this a critical and urgent issue for affected deployments.