<img height="1" width="1" style="display: none" alt="" src="https://px.ads.linkedin.com/collect/?pid=1098858&amp;fmt=gif">

Hackers Are Actively Exploiting a Critical VeloCloud Orchestrator Vulnerability

Urgent patch needed for critical VeloCloud flaw (CVE-2026-16812) actively exploited. Secure your systems now. Block IPs and rotate credentials.
Content Team
By Content Team

A maximum-severity command injection flaw (CVE-2026-16812, CVSS 10.0) in on-premises VeloCloud Orchestrator is being actively exploited in the wild. Attackers need no credentials — just network access to the VCO web interface — to hijack the orchestrator and potentially the SD-WAN Edge devices it manages.

Affected versions span VCO 5.2.x, 6.1.x, 6.4.x, and 7.0.x. Patches are available now. Three attacker IPs have been identified: 8.19.75.217, 206.72.242.124, and 206.72.242.162. Admins should patch immediately, block those addresses, restrict web interface access, and rotate credentials if compromise is suspected.

Source: Cybersecurity News
Share this article
Share on facebook Share on linkedin Share on twitter Share on email
blog_book_a_demo_cta_3x
Have questions about protecting your software?
Our escrow experts are standing by to help.
Book a free demo
YOU MAY ALSO LIKE
Pennsylvania Community College Shuts Down After Ransomware Attack Encrypts All Data
Mar 13, 2026
Four Laravel-Lang Packages Poisoned in Supply Chain Attack
May 27, 2026
Chained Vulnerabilities Let Attackers Backdoor Industrial Control Systems Running CODESYS
Apr 27, 2026
Silent Ransom Group Now Sending Fake IT Staff to Physically Breach Law Firms
May 31, 2026