Critical unauthenticated command injection in Arista VeloCloud Orchestrator On-Premises is actively exploited; CISA orders remediation by 30 July 2026.
Critical CVE-2026-16812 in Arista VeloCloud Orchestrator On-Premises with CVSS 10.0 is being actively exploited by attackers for remote code execution.
