CVE-2026-16812

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-16812

creationtimestamp| type| source ---|---|--- 2026-07-27 15:26:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrn7h6zcl32w 2026-07-27 17:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ab0b145-d51f-447c-8ca9-a77176d7904b...

VulnCheck KEV: CVE-2026-16812

Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator an...