vulnerability
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
CriticalCVSS 10.0KEVEPSS 1%
Summary
Arista has issued an advisory warning of a critical SQL injection vulnerability (CVE-2026-114625) in its VeloCloud Orchestrator (VCO) that has been actively exploited. The vulnerability requires a login to exploit and has been actively used in attacks since July. Arista recommends immediate mitigation steps, including limiting access and monitoring for suspicious activity.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data