VeloCloud

Mentions · 7d1
Mentions · 30d2
All mentions2
First seenOct 23, 2026
Last mentioned1d ago

Timeline

2 articles · newest first

Volt Typhoon used Silent Train relays to hide zero-day attacks

Lumen links the relay network to four confirmed zero-days and one likely flaw, with sessions rebuilt in under two minutes.

Security Affairsupdated 00:10 UTC · 20h agofirst Oct 29, 10:34 UTC · 1d agoThreat actorExploited14 sourcesCVE-2025-8875 CVE-2025-8876 CVE-2026-20127+1

Actively exploited VeloCloud Orchestrator flaw grants superuser access

The headline names CVE-2026-114625 as exploited; the supplied page text does not state versions or a fix.

SOCRadarOct 23, 08:16 UTC · 7d agoExploit / PoCExploitedCVE-2026-1146251 · 1 read

Related CVEs

by mentions

CVE-2026-2012789%10.0
Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator
published Feb 25, 2026Cisco Catalyst SD-WAN Controller (formerly SD-WAN vSmart)KEV
CVE-2026-168122%10.0
OS Command Injection in Arista VeloCloud Orchestrator On-Prem
published Jul 27, 2026Arista VeloCloud Orchestrator On-PremKEV
CVE-2026-1146251%9.4
SQL injection in Arista VeloCloud Orchestrator grants superuser
published 7d agoArista VeloCloud OrchestratorKEVPoC
CVE-2025-88764%9.4
OS Command Injection in N-able N-central Before 2025.3.1
published Aug 14, 2025N-able N-centralKEV
CVE-2025-88753%9.4
Insecure Deserialization Code Execution in N-able N-central (KEV)
published Aug 14, 2025N-able N-centralKEV

Appears with

VeloCloud Orchestratorproduct · 2
Black Lotus Labsorganization · 1
Volt Typhoonthreat actor · 1
Versavendor · 1
FRPmalware · 1
Ciscovendor · 1
Questvendor · 1
Catalyst SD-WANproduct · 1
N-ablevendor · 1
Lumenorganization · 1
Chiselmalware · 1
KACEproduct · 1
Versa Directorproduct · 1
N-centralproduct · 1

Entities are extracted by the model from each article. First seen Oct 23, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.