Arista Patches Actively Exploited VeloCloud Zero-Day

Patch Now if You Run VeloCloud On-Prem

Arista Networks released emergency patches for an actively exploited zero-day vulnerability in VeloCloud Orchestrator (VCO) on-premises deployments. The flaw is already being used in live attacks, meaning threat actors have working exploits in the wild. Organizations running VCO on-prem should apply the security update immediately. Cloud-hosted VeloCloud instances appear unaffected, but on-prem customers face real risk until patched.

What This Means for SMBs

SD-WAN platforms like VeloCloud sit at the heart of network infrastructure, managing traffic across branch offices, data centers, and cloud resources. A compromise here can give attackers deep access to your entire network topology, making this a high-priority patch. If you're unsure whether your environment is affected, now is the time to confirm with your MSP or vendor. For organizations managing their own infrastructure, verify your VeloCloud deployment model and patch status today. Unpatched network control planes are prime targets for ransomware groups looking for lateral movement opportunities.

Read the full advisory on BleepingComputer

Need help auditing your SD-WAN or network security posture? O-Cyrus provides infrastructure and security assessments tailored to mid-market IT teams. Contact us to discuss your environment.