Wire · technology
Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 28 July 2026 · Fusion42 review
Arista has released a patch for a critical unauthenticated command injection vulnerability in VeloCloud (CVSS 10.0) that is already being actively exploited. CISA has issued a deadline for administrators to apply the patch, affecting managed Edge devices across deployments.
This Wire brief sits within Fusion42's coverage of Cybersecurity, and 4 sources have reported it.
◆ ◆ The Wire takeaway
A perfect-10 vulnerability in Arista's edge networking gear is already being weaponised. If you build security monitoring or breach response tooling for enterprise networks, your inbound will spike this week—get your response playbooks ready now.
◆ Coverage
4 sources · 28 Jul 2026
◆ Related on Wire
◆ Topics