Critical SQL Injection Flaw in VeloCloud Orchestrator Under Active Exploitation
A critical-severity SQL injection vulnerability in VeloCloud Orchestrator is being actively exploited by attackers. This flaw allows unauthorized access to privileged internal functionality, potentially leading to operator privileges. The vulnerability is the third zero-day exploit in VeloCloud Orchestrator within a four-month period. Organizations are urged to apply patches immediately to mitigate the risk. The CVSS score for this vulnerability is not provided, but the severity is critical.