VeloCloud Networks, Inc.
Company
11
MENTIONS
5
EPISODES
5
PODCASTS
Search complete. 11 mentions across 5 episodes found for "VeloCloud Networks, Inc.".
Oct 24, 2026
speaker_0HOST
Yeah.
speaker_0HOST
The second flaw CISA added is CBE-2026-114625, and it impacts the Arista VeloCloud orchestrator.
speaker_1HOST
Yes.
speaker_0HOST
Now, the report explicitly says that to exploit this, the attacker needs network access and a valid authenticated session.
speaker_1HOST
And we really need to view this through a broader historical lens.
speaker_0HOST
What do you mean?
speaker_1HOST
This is the third Arista vulnerability in this specific VeloCloud product to be weaponized in the wild since July 2026.
speaker_0HOST
The third one?
Claire AirdHOST
The grain company was initially hacked by a group tracked as UAC-0099, which later handed off access to the more experienced Sandworm group.
Claire AirdHOST
Arista Networks has released a patch to fix a new zero day in on-premise VeloCloud orchestrator servers.
Claire AirdHOST
The zero day allows remote attackers to access internal functions without authentication.
Claire AirdHOST
This is the third VeloCloud zero day to be patched this year.
Claire AirdHOST
Dutch security firm iSecurity has unilaterally uninstalled the Popcorn Time piracy app from more than 2 million Windows and Mac OS PCs.
Claire AirdHOST
Popcorn Time is an abandoned project and the software contains dangerous vulnerabilities.
Jerry BellHOST
1.
Jerry BellHOST
Attackers are already exploiting a flaw in Arista's on-prem VeloCloud Orchestrator.
Jerry BellHOST
Any logged-in user can make themselves a super user.
Jerry BellHOST
Even the lowest read-only role is enough.
Jason EdwardsHOST
The recommendation is to update Plex Media Server to version 1.43.3.10861 or later and investigate every previously exposed system.
Jason EdwardsHOST
Next, active VeloCloud attacks threaten control of managed networks.
Jason EdwardsHOST
Managed networks are at risk because attackers are targeting on-premises VeloCloud orchestrator systems through a newly patched issue.
Jason EdwardsHOST
A basic authenticated user with web interface access could gain operator privileges.
Jason EdwardsHOST
Successful exploitation could expose orchestrator data and internal management functions.
Jason EdwardsHOST
Watch web and administrator logs for new operator privileges, unusual logins, or unexpected configuration changes.
Jason EdwardsHOST
The larger lesson is that basic account access can become broad control when management systems are exposed.
Jason EdwardsHOST
The recommendation is to patch on-premises VeloCloud Orchestrator, restrict its web interface, and review recent administrator activity for misuse.
speaker_0NARRATOR
cybersecurity threats.
speaker_0NARRATOR
Three threats today led by a second exploited VeloCloud Orchestrator Zeroday patched by Arista.
speaker_0NARRATOR
Arista patches second VeloCloud Orchestrator Zeroday exploited in attacks.
speaker_0NARRATOR
Arista fixed a privilege escalation flaw in VeloCloud Orchestrator that is already being exploited.
speaker_0NARRATOR
Any authenticated user can gain operator privileges and impersonate a local superuser operator.
speaker_0NARRATOR
Orchestrators manage SD-WAN fleets, so a compromise gives broad control over branch and site connectivity.