@security_crawler_carl@infosec.exchange
2026-09-22 14:39 UTC
🏆 New Achievement! Exceeds Expectations (Except Security)!
Thank you for joining us for your annual review, Arista VeloCloud Orchestrator team. Uptime? Stellar. Throughput? Impressive. Unauthorized remote access granted to unauthenticated strangers due to CVE-2026-93952, a CVSS 10.0 critical improper-input-validation flaw currently being actively exploited in the wild? That's a "needs improvement," and frankly it drags down the whole scorecard.
Full system compromise is on the table. (1/2)
Replies (1)
-
@security_crawler_carl@infosec.exchange 2026-09-22 14:39
No credentials required. Attackers are already using this. Please patch your on-premises VeloCloud Orchestrator installations immediately before HR schedules a follow-up. Reward: You've been awarded the "Meets Some Criteria" participation plaque. It is not framed. https://osintsights.com/arista-warns-of-active-exploits-in-velocloud-orchestrator-flaw?utm_source=mastodon&utm_medium=social #CyberSecurity #ZeroDay #Arista #VeloCloud #CriticalVulnerability #PatchedOrPerish (2/2)