5.2.3[.]16IP address
Reported by 2 independent sources · first reported by The Hacker News · last reported
Last reported 2 days ago
What the reports say
3 reports, newest first · the exact sentence from each-
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks“5.2.3[.]16”
-
Validación incorrecta de datos de entrada en VeloCloud Orchestrator de Arista“rama 5.2.3: VCO 5.2.3[.]16 o posterior;”
-
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups“5.2.3[.]16 and later”
Indicators reported together
named in the same reports- 6.1.3[.]7in 3 reports
- 6.4.2[.]8in 3 reports
- 5.2.3[.]15in 2 reports
- 6.4.2[.]7in 2 reports
- 7.0.0[.]2in 2 reports
- 5.2.3[.]14in 1 report
- 6.1.3[.]4in 1 report
- 6.4.2[.]4in 1 report
- 7.0.0[.]1in 1 report
- dc78e206eaeadec59fc5801fe4556bd0in 1 report
- 142.93.149[.]77in 1 report
- 104.248.126[.]159in 1 report
- 5.2.3[.]18in 1 report
- 6.1.3[.]10in 1 report
- 6.4.2[.]12in 1 report
- 74.82.197[.]86in 1 report
- 38.54.50[.]151in 1 report
Copy these 17 indicators · defanged
Also named with it: CVE-2026-93952, CVE-2026-16812, CVE-2026-114625
Thanks — we review every report.