SD-WAN – Security Blog https://blog.siteguarding.com Mon, 26 Oct 2026 15:32:16 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg SD-WAN – Security Blog https://blog.siteguarding.com 32 32 On-Prem VeloCloud Exploit: Read-Only Login Becomes Superuser https://www.siteguarding.com/security-blog/on-prem-velocloud-readonly-exploit/ Mon, 26 Oct 2026 15:32:16 +0000 https://www.siteguarding.com/security-blog/on-prem-velocloud-readonly-exploit/ Attackers are using an on-prem VeloCloud exploit, CVE-2026-114625 (CVSS 9.9), to turn the lowest-privilege Enterprise Read Only portal account into local superuser on the Arista VeloCloud Orchestrator host. That host runs the SD-WAN management plane for every branch and site it controls. A forgotten login is now the shortest path to the management plane. Key takeaways On 26 October 2026...

Source

]]>