Velocloud Security Vulnerability Event

Incident Report for TPx

Resolved

The customer issues created by the certificate updates and password resets have all be mitigated. Customer services are restored.

For any assistance resetting your password or tokens, please submit a support request through www.tpx.com/support.
Posted Aug 13, 2026 - 14:24 PDT

Update

Update - All systems are operating normally. We are continuing to monitor for any issues.
Posted Aug 06, 2026 - 11:08 PDT

Update

Arista has issued Security Advisory 0144. TPx VeloCloud Orchestrators are not running a vulnerable software version. However, as an added security precaution, Arista has initiated password resets for VeloCloud Orchestrator users and is invalidating existing API tokens.

Users will need to set a new password before signing in. To reset your password securely, select Forgot Password on the VeloCloud Orchestrator login page. You may also receive an email from no-reply@velocloud.net containing a password-reset link.

Customers who use API tokens will need to generate new tokens and update any applications or integrations that rely on them. New passwords should follow your organization’s security standards.

For any assistance resetting your password or tokens, please submit a support request through www.tpx.com/support.
Posted Aug 05, 2026 - 10:11 PDT

Update

We are continuing to monitor for any further issues.
Posted Aug 04, 2026 - 14:42 PDT

Monitoring

Arista/Velocloud has issued Security Advisory 0144 for a security issue that could affect some Orchestrators. They are in the process of resetting certain certificate authorities to mitigate the security vulnerability.

TPx VeloCloud Orchestrators are not running an Arista/Velocloud vulnerable software version.

However, out of an abundance of caution, we recommend that all VeloCloud Orchestrator users reset their passwords and API tokens within the next 48 hours. New passwords should follow your organization’s security standards.

For any assistance resetting your password or tokens, please submit a support request through www.tpx.com/support.
Posted Aug 04, 2026 - 14:40 PDT
This incident affected: Networking Services (MSx WAN (SD-WAN)).