A critical CVSS 10.0 vulnerability has been discovered in on-premises VeloCloud Orchestrator instances, with active exploitation detected in the wild. The flaw affects setups utilizing certificate-based authentication for Edge devices, allowing unauthenticated remote threat actors to escalate privileges and impact the host system. Administrators should immediately review vendor advisories and apply available patches.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →