CyberSecurity News
Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months
SecurityWeek
· October 23, 2026AI summary
Attackers are exploiting a critical-severity SQL injection flaw in VeloCloud Orchestrator, which is the third zero-day vulnerability in this product in four months. This flaw allows attackers to access internal functionality with elevated privileges and gain operator privileges.
This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.