Attributed metadata history
Up to 100 retained publisher events per page for ada8ded428beecaf963b9e7f33b831b72ec2af971d78075025193dd5db753602. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_1325ef79144357aa4c
observed · 2026-10-12 06:54:03 UTC
available
Fingerprint: 5ca1ad11a287d68faf40b677306c4802f5be91bc1af4f6c958597def6b2d022e
intelligence_src_1325ef79144357aa4c
observed · 2026-10-12 06:54:03 UTC
A vulnerability has been discovered in VeloCloud Orchestrator (VCO) On-Prem that could allow for remote code execution. VeloCloud Orchestrator is a centralized management platform used to configure, provision, monitor, and troubleshoot software-defined wide area networks (SD-WAN) and SASE components across enterprise edges and gateways. Successful exploitation of this vulnerability may allow a remote attacker to access privileged internal functionality, execute commands, and impact the VCO host. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services whose accounts are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.
Fingerprint: d0422d7a617213f2c3fc961a6500fd5e72d8bfe3f80367a496b311ca505d93fb