6.1.3[.]7IP address
Reported by 3 independent sources · first reported by The Hacker News · last reported
Last reported 2 days ago
What the reports say
4 reports, newest first · the exact sentence from each-
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks“On 6.1, it affects releases up to 6.1.3[.]7, and no fixed release is listed.”
-
Validación incorrecta de datos de entrada en VeloCloud Orchestrator de Arista“6.1.3[.]7 y anteriores de la rama 6.1.x;”
-
Arista Networks security advisory (AV26-947) – Update 1“Versions 6.1.0 to 6.1.3[.]7”
-
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups“6.1.3[.]7 and earlier”
Indicators reported together
named in the same reports- 5.2.3[.]15in 3 reports
- 5.2.3[.]16in 3 reports
- 6.4.2[.]7in 3 reports
- 6.4.2[.]8in 3 reports
- 7.0.0[.]2in 3 reports
- 5.2.3[.]14in 1 report
- 6.1.3[.]4in 1 report
- 6.4.2[.]4in 1 report
- 7.0.0[.]1in 1 report
- dc78e206eaeadec59fc5801fe4556bd0in 1 report
- 142.93.149[.]77in 1 report
- 104.248.126[.]159in 1 report
- 5.2.3[.]18in 1 report
- 6.1.3[.]10in 1 report
- 6.4.2[.]12in 1 report
- 74.82.197[.]86in 1 report
- 38.54.50[.]151in 1 report
Copy these 17 indicators · defanged
Also named with it: CVE-2026-93952, CVE-2026-16812, CVE-2026-114625
Thanks — we review every report.