Announcements

Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

  • 28th July 2026
A security vulnerability has been identified in the Arista VeloCloud On-Prem Orchestrator, a tool used to manage network and hosted service resources. The flaw is an operating system command injection issue, which allows a remote attacker to send specially crafted input to run unauthorized commands on the system hosting the orchestrator.If ...
Continue reading

Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

  • 28th July 2026
A security vulnerability has been identified in Fortinet FortiOS, a network security platform. This flaw creates a risk of sensitive information being exposed to people who are not authorized to access it.To exploit this issue, an attacker would first need to have already gained unauthorized low-level access to the affected system’s files via a ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 28th July 2026
A security advisory (reference number MA-1472.072026) from MyCERT was published on July 22, 2026, detailing a vulnerability found in Microsoft Active Directory Federation Services (AD FS). This is a tool many organizations use to manage user logins and access permissions for connected websites, applications, and internal business systems.The ...
Continue reading