Bottom line: CISA reports in-the-wild exploits against vulnerabilities in Fortinet FortiOS and Arista VeloCloud — immediate patching measures required.
The US security authority CISA documents active attacks against vulnerabilities in Fortinet FortiOS and Arista VeloCloud. For CISOs, this means immediate action is required for these critical network components.
CISA has confirmed that attackers are exploiting security vulnerabilities in two widely used network and security products: Fortinet FortiOS and Arista VeloCloud. The agency continues its established practice of publicly documenting in-the-wild exploits to compel organizations to remediate quickly.
For security stakeholders, this is a critical signal. Both products are widely deployed in enterprise environments — FortiOS as a firewall and VPN solution, Arista VeloCloud as an SD-WAN platform. Active exploits mean that attackers are already engaged in reconnaissance or compromise phases, not merely in proof-of-concept stages.
CISOs should immediately inventory their Fortinet and Arista deployments, identify affected versions, and prioritize security updates or mitigations. CISA publishes current guidance on its website, including affected versions and remediation paths.
Source: www.heise.de · Published July 28, 2026
Lumi AI News — AI-assisted curation according to Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.