Velocloud Security Vulnerability Event

Update timeline

1. monitoring Aug 04, 2026, 09:40 PM UTC

   Arista/Velocloud has issued Security Advisory 0144 for a security issue that could affect some Orchestrators. They are in the process of resetting certain certificate authorities to mitigate the security vulnerability. TPx VeloCloud Orchestrators are not running an Arista/Velocloud vulnerable software version. However, out of an abundance of caution, we recommend that all VeloCloud Orchestrator users reset their passwords and API tokens within the next 48 hours. New passwords should follow your organization’s security standards. For any assistance resetting your password or tokens, please submit a support request through www.tpx.com/support.

2. monitoring Aug 04, 2026, 09:42 PM UTC

   We are continuing to monitor for any further issues.

3. monitoring Aug 05, 2026, 05:11 PM UTC

   Arista has issued Security Advisory 0144. TPx VeloCloud Orchestrators are not running a vulnerable software version. However, as an added security precaution, Arista has initiated password resets for VeloCloud Orchestrator users and is invalidating existing API tokens. Users will need to set a new password before signing in. To reset your password securely, select Forgot Password on the VeloCloud Orchestrator login page. You may also receive an email from [email protected] containing a password-reset link. This is a valid email you can respond too. Customers who use API tokens will need to generate new tokens and update any applications or integrations that rely on them. New passwords should follow your organization’s security standards. For any assistance resetting your password or tokens, please submit a support request through www.tpx.com/support.

4. monitoring Aug 06, 2026, 06:08 PM UTC

   Update - All systems are operating normally. We are continuing to monitor for any issues.

5. resolved Aug 13, 2026, 09:24 PM UTC

   The customer issues created by the certificate updates and password resets have all be mitigated. Customer services are restored. For any assistance resetting your password or tokens, please submit a support request through www.tpx.com/support.