Security · 24 October 2026
UnconfirmedArista VCO Zero-Day SQL Injection Exploited to Gain Operator Privileges
A critical‑severity SQL injection flaw in Third Arista VCO lets attackers access privileged functionality and obtain operator privileges, and it was exploited within four months.
Why it matters
Verify product dependencies on Arista VCO and schedule urgent patches or migrations.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 24 Oct →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.