VO
Product
VeloCloud Orchestrator
On CISA KEVExploited in the wild
5
CVEs
4
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 2Medium 0Low 0
Watch
Add VeloCloud Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93952 In wildKEV | 10.0 | Sep 22 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host Affected: 5.2.0 before 5.2.3.16; 6.1.0 through 6.1.3.7; 6.4.0 before 6.4.2.8; 7.0.0 through 7.0.0.2 |
| CVE-2026-16812 In wildKEV | 10.0 | Jul 27 | VeloCloud Orchestrator OS Command Injection Affected: 5.2.0 before 5.2.3.14; 6.1.0 before 6.1.3.4; 6.4.0 before 6.4.2.4; 7.0.0 |
| CVE-2026-114625 In wildKEVNew | 9.9 | Oct 22 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host Affected: 5.2.0 before 5.2.3.18; 6.1.0 before 6.1.3.10; 6.4.0 before 6.4.2.12 |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: All versions, or not specified |
Showing 4