https://vulnerability.circl.lu/sightings/feed 2026-08-30T01:23:26.652002+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ec14a181-c1a2-407b-af51-7806d7daf18f/export 2026-08-30T01:23:26.673411+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ec14a181-c1a2-407b-af51-7806d7daf18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu2scilfqy2t", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 22 interactions\nCVE-2026-19490: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65641: 8 interactions\nCVE-2026-16812: 5 interactions\nCVE-2026-19632: 5 interactions\n", "creation_timestamp": "2026-08-27T11:59:21.467372Z"} 2026-08-27T11:59:21.467372+00:00 https://vulnerability.circl.lu/sighting/74b4c42e-09f1-4bff-ad4e-7dfcfb3b1028/export 2026-08-30T01:23:26.675638+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "74b4c42e-09f1-4bff-ad4e-7dfcfb3b1028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtxjyerxvs2y", "content": "\u653b\u6483\u8005\u304cArista VeloCloud Orchestrator\u306e\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\n\nArista VeloCloud Orchestrator\uff08VCO\uff09\u306e\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u3001\u6700\u3082\u6df1\u523b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u304c\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u3002\n\nCVE-2026-16812\uff08CVSS\u30b9\u30b3\u30a2\uff1a10.0\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u306e\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u4e8b\u4f8b\u3067\u3042\u308a\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u300c\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248VeloCloud Orchestrator\uff08VCO\uff09\u306b\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u554f\u984c\u304c\u3042\u308a\u3001\u3053\u306e...", "creation_timestamp": "2026-08-26T04:52:35.493413Z"} 2026-08-26T04:52:35.493413+00:00 https://vulnerability.circl.lu/sighting/3880743d-b9b4-41e1-9d78-c30a788ac9a4/export 2026-08-30T01:23:26.675760+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3880743d-b9b4-41e1-9d78-c30a788ac9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtxhf65jw22y", "content": "\u300cVeloCloud Orchestrator\u300d\u306b\u8106\u5f31\u6027\u3001\u60aa\u7528\u3092\u78ba\u8a8d - \u4fb5\u5bb3\u8abf\u67fb\u3092\n\nSD-WAN\u74b0\u5883\u306e\u7d71\u5408\u7ba1\u7406\u88fd\u54c1\u300cArista VeloCloud Orchestrator\uff08VCO\uff09\u300d\u306e\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u3059\u3067\u306b\u8106\u5f31\u6027\u306e\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002\n\nArista Networks\u306f\u73fe\u5730\u6642\u95937\u670827\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-16812\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u3059\u3067\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3068\u3044\u3046\u3002\n\n\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u30a6\u30a7\u30d6\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u3078\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308c\u3070\u3001\u300cVCO\u300d\u306e\u30c6\u30ca\u30f3\u30c8\u3084\u30aa\u30da\u30ec\u30fc\u30bf\u306e\u8a8d\u8a3c\u60c5\u5831\u306f\u5fc5\u8981\u306a...", "creation_timestamp": "2026-08-26T04:06:01.057765Z"} 2026-08-26T04:06:01.057765+00:00 https://vulnerability.circl.lu/sighting/5c608238-6cdc-496e-9a32-ba287fd47467/export 2026-08-30T01:23:26.675840+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5c608238-6cdc-496e-9a32-ba287fd47467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtxhajovfs2y", "content": "\u7c73\u5f53\u5c40\u3001\u300cFortiOS\u300d\u300cVeloCloud Orchestrator\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3092\u78ba\u8a8d\n\n\u7c73\u5f53\u5c40\u306f\u3001\u300cFortiOS\u300d\u3084\u300cVeloCloud Orchestrator\u300d\u306b\u5224\u660e\u3057\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u304c\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670827\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30782\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-16812\u300d\u300cCVE-2025-68686\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2026-16812\u300d\u306f\u3001SD-WAN\u74b0\u5883\u306e\u7d71\u5408\u7ba1\u7406\u88fd\u54c1\u300cArista VeloCloud...", "creation_timestamp": "2026-08-26T04:03:24.809407Z"} 2026-08-26T04:03:24.809407+00:00 https://vulnerability.circl.lu/sighting/ea960db5-8c84-4289-ba12-09c5b3b96862/export 2026-08-30T01:23:26.675913+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ea960db5-8c84-4289-ba12-09c5b3b96862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtxggbv4hs2y", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date July 27, 2026\n\nCVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nCVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability", "creation_timestamp": "2026-08-26T03:48:44.148382Z"} 2026-08-26T03:48:44.148382+00:00 https://vulnerability.circl.lu/sighting/f88330d4-1d6c-4593-aa6c-0b702c4977af/export 2026-08-30T01:23:26.675996+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f88330d4-1d6c-4593-aa6c-0b702c4977af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2344", "content": "\ud83d\udd34 Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw\n\nA maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution.\n\n\"VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host,\" Arista\u00a0said\u00a0in a Monday advisory.", "creation_timestamp": "2026-08-23T00:00:45.352196Z"} 2026-08-23T00:00:45.352196+00:00 https://vulnerability.circl.lu/sighting/754c0da4-914a-4d64-9df6-93a09c40145a/export 2026-08-30T01:23:26.676071+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "754c0da4-914a-4d64-9df6-93a09c40145a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://t.me/pphm_HackerNews/2344", "content": "\ud83d\udd34 Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw\n\nA maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution.\n\n\"VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host,\" Arista\u00a0said\u00a0in a Monday advisory.", "creation_timestamp": "2026-08-22T00:00:11.247469Z"} 2026-08-22T00:00:11.247469+00:00 https://vulnerability.circl.lu/sighting/cb6b19aa-78b3-4174-a631-6fec455dfe1c/export 2026-08-30T01:23:26.676138+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cb6b19aa-78b3-4174-a631-6fec455dfe1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://t.me/pphm_HackerNews/2344", "content": "\ud83d\udd34 Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw\n\nA maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution.\n\n\"VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host,\" Arista\u00a0said\u00a0in a Monday advisory.", "creation_timestamp": "2026-08-21T23:00:07.659046Z"} 2026-08-21T23:00:07.659046+00:00 https://vulnerability.circl.lu/sighting/4e4ed6a4-d6ad-4407-b939-b9312a889b3d/export 2026-08-30T01:23:26.676203+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4e4ed6a4-d6ad-4407-b939-b9312a889b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3ms7v5nglkn2g", "content": "CVE-2026-16812: CVSS 10.0 pre-auth RCE in Arista VCO - actively exploited, patch now. https://intel.threadlinqs.com/threat/TL-2026-1851 #ThreatIntel #CVE_2026_16812 #BUG1901675 #Arista", "creation_timestamp": "2026-08-04T01:43:15.967918Z"} 2026-08-04T01:43:15.967918+00:00 https://vulnerability.circl.lu/sighting/407e9f46-dc6b-48c6-ade9-9a7709fb09cb/export 2026-08-30T01:23:26.676265+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "407e9f46-dc6b-48c6-ade9-9a7709fb09cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16812", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3ms6rbp3y4s2f", "content": "Kritieke kwetsbaarheid in VeloCloud Orchestrator wordt actief misbruikt\n\nOnderzoekers hebben een ernstige beveiligingskwetsbaarheid ontdekt in on-premises VeloCloud Orchestrator (VCO) implementaties, met het registratienummer CVE-2026-16812, die momenteel actief wordt uitgebuit. De ...", "creation_timestamp": "2026-08-03T15:01:17.021667Z"} 2026-08-03T15:01:17.021667+00:00