VO
Product
VeloCloud Orchestrator On-Prem
by Arista Networks · last CVE Jul 27, 2026
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 0Low 0
Watch

Add VeloCloud Orchestrator On-Prem to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-16812
In wildKEV
10.0
1%
Jul 27
VeloCloud Orchestrator OS Command Injection
Affected: 5.2.0 before 5.2.3.14; 6.1.0 before 6.1.3.4; 6.4.0 before 6.4.2.4; 7.0.0 before 7.0.0.1
CVE-2026-17191
9.1
0%
Jul 27
VeloCloud Orchestrator Flow Metrics API SQL Injection
Affected: 5.2.0 before 5.2.3.14; 6.1.0 before 6.1.3.4; 6.4.0 before 6.4.2.4
CVE-2026-17192
8.5
0%
Jul 27
VeloCloud Orchestrator Missing Input Validation SSRF
Affected: 5.2.0 before 5.2.3.14; 6.1.0 before 6.1.3.4; 6.4.0 before 6.4.2.4
Showing 3