Patch Arista VeloCloud Orchestrator On-Prem CVE-2026-16812, restrict exposure, and complete safe recovery checks after CISA KEV added the actively exploited issue.