OTX Threat: VeloCloud Orchestrator Remote Access Vulnerability

VeloCloud Orchestrator (VCO) on-premises deployments contain a critical vulnerability allowing remote attackers to access privileged internal functionality and compromise the VCO host. The flaw, tracked as CVE-2026-93952 with a CVSS score of 10.0, enables attackers with network access to the VCO web interface and access to the public portion of VeloCloud Edge authentication certificates to exploit CVEs: CVE-2026-93952