Arista has issued an advisory regarding an actively exploited zero-day SQL injection vulnerability in the VeloCloud Orchestrator management platform. The flaw allows authenticated users with low privileges to escalate to operator status, granting full control over the SD-WAN infrastructure. Administrators must apply available patches or mitigations immediately to prevent potential compromise.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →