Arista warns of critical SQL injection security vulnerability

Arista Networks published an urgent security warning on October 22, 2026, regarding a critical SQL injection vulnerability in the VeloCloud Orchestrator (VCO). This vulnerability allows attackers to take control of the central management system for VeloCloud SD-WAN networks. The security flaw affects all users who can log in with a read-access account, granting them operator rights, the highest level of control over the system.

The VeloCloud Orchestrator platform is used by companies worldwide to manage their SD-WAN networks. The discovery of this vulnerability has raised concerns among IT security experts, as it could potentially have far-reaching implications for network security. Attackers could not only steal data through this vulnerability but also manipulate the network infrastructure.

Details of the Vulnerability

The SQL injection vulnerability allows attackers to access the database through the VCO login interface. Even users with limited rights can gain administrator privileges through targeted inputs in the login form. This poses a significant risk, as it enables attackers to change critical configurations and potentially disrupt the entire network operation.

Arista emphasized in its statement that the vulnerability is actively being exploited. Companies using VeloCloud Orchestrator are urgently advised to review their systems and take appropriate security measures. The exact number of affected systems and the severity of the attacks are currently unclear; however, a swift response is recommended.

The security warning from Arista comes at a time when cyberattacks on corporate networks are increasing worldwide. The threat of SQL injection attacks is not new, but this incident highlights the importance of implementing security updates promptly and regularly checking systems for vulnerabilities. Companies should be aware of the risks associated with using cloud-based management solutions.

Response from the Security Community

The security community has responded to Arista's warning by emphasizing the urgency of the situation. Experts advise patching the affected systems immediately and implementing additional security measures to minimize the risk of an attack. The discussion about the vulnerability has also led to increased information sharing between companies and security researchers to prevent similar incidents in the future.

Arista has announced that it is working on a patch to close the security gap. Until this patch is available, companies should monitor their systems and report any suspicious activities immediately. The situation underscores the need to regularly review and update security protocols to counter the ever-evolving threats in cyberspace.

The discovery of this critical security vulnerability in the VeloCloud Orchestrator is another indication of the challenges companies face in the field of cybersecurity. The need to quickly identify and remediate vulnerabilities is crucial to ensuring the integrity and confidentiality of corporate data.