Velocloud Orchestrator On-prem (Arista Networks) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-27. Vendor: Arista Networks.

CVEs of Velocloud Orchestrator On-prem

• CVE-2026-17191 - CVSS 9.1 (critical), 2026-07-27: An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries,…
• CVE-2026-17192 - CVSS 8.5 (high), 2026-07-27: A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of authenticated tenant accounts to internal…
• CVE-2026-16812 - CVSS 10 (critical), 2026-07-27: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact…