Arista warns of exploited VCO zero-day; urges immediate patching

Arista Networks disclosed a critical-severity zero-day vulnerability in its Virtual Cloud Office (VCO) product that is being actively exploited by remote attackers to access privileged internal functionality. The vendor has issued an urgent patch advisory, but details on the attack scope and affected versions remain limited. This matters because VCO is used in enterprise and service-provider environments, and active exploitation of a critical flaw in a network vendor's product can enable lateral movement and data compromise.