CVE-2026-16812

Arista VeloCloud SD-WAN Orchestrator Critical Command Injection Flaw CVE-2026-16812 Exploited in the Wild

CISA adds CVE-2026-16812 to KEV, warning of active exploitation targeting on-premise Arista VeloCloud SD-WAN Orchestrator management appliances.