https://vulnerability.circl.lu/sightings/feed 2026-07-28T15:25:18.187912+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/66846c45-2ec6-4ba6-9fe4-e4a53fb69ef9/export 2026-07-28T15:25:18.211365+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "66846c45-2ec6-4ba6-9fe4-e4a53fb69ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16812", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mrpldakrc42y", "content": "Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 command injection, exploited in the wild.\n\nSD-WAN orchestrators reach every site you run. Patch now.\n\n#ThreatIntel #ICS\nhttps://threat-intelligence.redeyesecurity.com/blog/arista-velocloud-orchestrator-cve-2026-16812-exploited-2026", "creation_timestamp": "2026-07-28T14:04:50.936961Z"} 2026-07-28T14:04:50.936961+00:00 https://vulnerability.circl.lu/sighting/a7a7f494-c928-4f5e-997c-2e6b02c5d476/export 2026-07-28T15:25:18.214075+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a7a7f494-c928-4f5e-997c-2e6b02c5d476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mrpl2nc4va2n", "content": "Fresh exploitation signal\n\nCVE-2026-16812 is an unauthenticated VCO command injection. Arista says it is actively exploited and provides fixed releases.", "creation_timestamp": "2026-07-28T14:00:01.355177Z"} 2026-07-28T14:00:01.355177+00:00 https://vulnerability.circl.lu/sighting/582fe12e-6348-4e90-9d75-02adeffd5cc3/export 2026-07-28T15:25:18.214171+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "582fe12e-6348-4e90-9d75-02adeffd5cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrphgxne3t2o", "content": "\ud83e\udd16 CVE-2026-16812 (CVSS 10.0): Critical unauthenticated OS command injection in Arista VeloCloud Orchestrator actively exploited. No auth required \u2014 full RCE. On-prem VCO targeted. Patch now.\nhttps://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html", "creation_timestamp": "2026-07-28T12:55:19.582654Z"} 2026-07-28T12:55:19.582654+00:00 https://vulnerability.circl.lu/sighting/a9dedc28-0695-4630-bf58-3904c8c0ea53/export 2026-07-28T15:25:18.214252+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a9dedc28-0695-4630-bf58-3904c8c0ea53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16812", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mrpfbgi23d2p", "content": "Patch Now: Arista VeloCloud Orchestrator Under Active Exploitation (CVSS 10.0)\n\nhttps://blindthoughts.com/arista-velocloud-orchestrator-cve-2026-16812-active-exploitation\n\n#vulnerability #sdwan #activeexploitation #networksecurity #patchmanagement", "creation_timestamp": "2026-07-28T12:16:26.153068Z"} 2026-07-28T12:16:26.153068+00:00 https://vulnerability.circl.lu/sighting/3f3c319e-da06-492b-918c-6afb73ec20a2/export 2026-07-28T15:25:18.214329+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3f3c319e-da06-492b-918c-6afb73ec20a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16812", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrpeceej5g23", "content": "Your SD-WAN orchestrator just became an attacker's backdoor.\n\nVeloCloud Orchestrator on-prem.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-16812-vco-orchestator-unauth-access-exploited/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-28T11:59:05.113165Z"} 2026-07-28T11:59:05.113165+00:00 https://vulnerability.circl.lu/sighting/7619d7f9-50ed-49d5-9a14-3adcb43a71aa/export 2026-07-28T15:25:18.214400+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7619d7f9-50ed-49d5-9a14-3adcb43a71aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrp7zklpv32v", "content": "Arista's VeloCloud Orchestrator faces a critical zero-day vulnerability (CVE-2026-16812) under active exploitation. Immediate patching is essential. #Arista #VeloCloud thedailytechfeed.com/critical-zer...", "creation_timestamp": "2026-07-28T10:42:34.384037Z"} 2026-07-28T10:42:34.384037+00:00 https://vulnerability.circl.lu/sighting/0a3d4386-d4a8-4575-9d78-61948efd1e52/export 2026-07-28T15:25:18.214468+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0a3d4386-d4a8-4575-9d78-61948efd1e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mrp673xov22s", "content": "Every enterprise running Arista's $ANET on-prem VeloCloud Orchestrator faces a maximum-severity flaw under active attack. CVE-2026-16812 (CVSS 10.0) lets attackers inject commands and take over the orchestrator plus the branch Edge devices it manages. CISA: patch by July 30.", "creation_timestamp": "2026-07-28T10:09:52.210086Z"} 2026-07-28T10:09:52.210086+00:00 https://vulnerability.circl.lu/sighting/e1a4eac7-cd34-49ff-bd35-e40d2ecc1ec8/export 2026-07-28T15:25:18.214648+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e1a4eac7-cd34-49ff-bd35-e40d2ecc1ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrp4lapa7423", "content": "A critical command injection vulnerability in Arista VeloCloud Orchestrator (CVE-2026-16812, CVSS 10.0) is actively exploited, allowing remote attackers to execute arbitrary code. Affected versions include VCO 5.2.x < 5.2.3.14, 6.1.x < 6.1.3.4, 6.4.x < 6.4.2.4, and 7.0.x < 7.0.0.1.", "creation_timestamp": "2026-07-28T09:40:52.763741Z"} 2026-07-28T09:40:52.763741+00:00 https://vulnerability.circl.lu/sighting/0c1f2c9a-164e-47ad-a1e8-0a4cdc3175d8/export 2026-07-28T15:25:18.214722+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0c1f2c9a-164e-47ad-a1e8-0a4cdc3175d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrp4iawyac2y", "content": "CVE-2026-16812: Is Arista's VeloCloud Vulnerability Management Adequate? #CVE2026 #VeloCloud #AristaNetworks", "creation_timestamp": "2026-07-28T09:39:11.958840Z"} 2026-07-28T09:39:11.958840+00:00 https://vulnerability.circl.lu/sighting/190518af-b4e9-4769-bf53-577bcf15bf49/export 2026-07-28T15:25:18.214794+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "190518af-b4e9-4769-bf53-577bcf15bf49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrp4i57pwd2j", "content": "CVE-2026-16812: Arista's Patch Raises Questions on Exploit Scope and Transparency #CVE2026 #AristaNetworks #VeloCloud", "creation_timestamp": "2026-07-28T09:39:07.957604Z"} 2026-07-28T09:39:07.957604+00:00