Skip to content
The Nexus
DossierENTITY

CVE-2026-16812

Coverage of CVE-2026-16812 in the Nexus archive.

Earliest in view: Jul 28 · 04:43 UTCMost recent: Jul 28 · 04:43 UTC
Co-mentioned in this coverage
Arista VeloCloud Orchestratororganization1operating system command injectiontopic1arbitrary code executiontopic1
Recent coverage
  • SECURITYJul 28 · 04:43 UTCTHE HACKER NEWS
    Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

    A maximum-severity command injection vulnerability (CVE-2026-16812) in on-premises versions of Arista VeloCloud Orchestrator is being actively exploited, allowing arbitrary code execution. The flaw, rated with a CVSS score of 10.0, enables attackers to execute operating system commands through the affected system.

CVE-2026-16812 · Dossier · The Nexus