WORLDTECH网络安全 单一来源
Arista修补VeloCloud Orchestrator正遭攻击利用的新零日漏洞
由 WORLDTECH 译自英文。事实、数字、名称和来源均与英文原文一致。 English
事件经过
Arista Networks发布安全更新，修补影响VeloCloud Orchestrator（VCO）本地部署的一个正遭利用的零日漏洞（即在修复程序推出前已被用于攻击的漏洞）。
关键事实
- Arista Networks——已发布：安全更新，用于修补影响VeloCloud Orchestrator（VCO）本地部署、正遭主动利用的零日漏洞
来源与证据
- BleepingComputer 报道来源
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks ↗
https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/ - The Hacker News 报道来源
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks ↗
https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html - SC Media 报道来源
Arista Networks patches actively exploited zero-day vulnerability in VeloCloud Orchestrator ↗
https://www.scworld.com/brief/arista-networks-patches-actively-exploited-zero-day-vulnerability-in-velocloud-orchestrator