https://reddit.com/r/cybersecurity/comments/1wsa7sa/velocloud_100_fbi_ai_сам_сломал_госсайт/: VeloCloud 10.0 + FBI + AI сам сломал госсайт
Published Sep 28, 2026
·Updated
Affected Software
1 affected component
Arista VeloCloud Orchestrator=6.1, =7.0
Frequently Asked Questions
1
What access or information does an attacker need to exploit this issue?
The attacker needs network access to the VCO web interface and the public certificate of an Edge device. No authenticated VCO account is described as being required.
2
How far could a compromise of the orchestrator reach?
Successful exploitation provides privileged access to the orchestrator. Because VCO centrally manages Edge devices, the attacker could potentially take control of every Edge device managed by that orchestrator.
3
Were fixes available for all affected release branches at the time of reporting?
No. At the time described, patches were not yet available for the 6.1 and 7.0 branches.