A catastrophic flaw in the VeloCloud Orchestrator has been actively exploited, granting attackers unfettered access to enterprise networks through certificate-based setups. The vulnerability, which holds a CVSS (Common Vulnerability Scoring System) rating of 10.0 – the highest severity level – affects various organizations that utilize the platform for network management and security.
The VeloCloud Orchestrator is a widely used tool for managing and securing virtual private networks (VPNs), cloud connectivity, and hybrid WANs. Its widespread adoption has made it an attractive target for attackers seeking to exploit vulnerabilities in the software. According to reports, the flaw allows malicious actors to bypass authentication mechanisms and gain unauthorized access to sensitive areas of the network.
The vulnerability stems from a certificate-based setup, which is designed to provide secure communication between devices on a network. However, security experts have discovered that an attacker can manipulate this setup to gain elevated privileges, effectively allowing them to move laterally within the network without being detected. This cross-domain privilege escalation enables attackers to access sensitive data and disrupt operations.
The impact of this vulnerability is significant, as it can compromise entire networks, regardless of their size or complexity. Organizations that rely on VeloCloud Orchestrator for security and management are advised to take immediate action to mitigate the risk. This includes conducting thorough security audits, implementing additional authentication measures, and ensuring that all software components are up-to-date.
The exploitation of this vulnerability highlights the importance of regular security updates and maintenance. It also underscores the need for organizations to prioritize cybersecurity awareness and training among their employees. By staying informed about emerging threats and taking proactive steps to address them, businesses can minimize the risk of a devastating breach.
In light of this development, we urge all VeloCloud Orchestrator users to review their security protocols and take immediate action to secure their networks. This includes patching affected software components, implementing robust authentication mechanisms, and conducting regular vulnerability assessments. By doing so, organizations can protect themselves against the devastating consequences of a successful attack.
Source: The Hacker News — 2026-09-22