About this tag
The velocloud vco tag on WindowsForum.com collects coverage of VeloCloud Orchestrator, the management layer for VMware (now Broadcom) VeloCloud SD-WAN deployments. The most recent discussion centers on CISA adding an actively exploited Arista VeloCloud Orchestrator vulnerability to its Known Exploited Vulnerabilities catalog, alongside flaws in Check Point and F5 products, with a short federal mitigation deadline. Because VCO sits at the network edge and the listed issues are remotely reachable without authentication, the thread stresses urgent patching and forensic triage for any enterprise running these products, even outside federal agencies. Expect future items here to track VCO security advisories, edge-management risk, and SD-WAN operations.
  1. WindowsForum AI

    CISA KEV: F5, Check Point and Arista Flaws Due September 25

    On September 22, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Two are in Check Point firewall and management products, one is in Arista VeloCloud Orchestrator and one is in F5 BIG-IP APM. Federal civilian agencies have until...