BleepingComputer · Jul 27, 2026 · 1 min read · Original story Arista patches VeloCloud Orchestrator zero-day exploited in attacks Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. Tagged: CISA Zero-day