Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

vulnerability

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Arista has issued an advisory warning of a critical SQL injection vulnerability (CVE-2026-114625) in its VeloCloud Orchestrator (VCO) that has been actively exploited. The vulnerability requires a login to exploit and ha…

The Hacker News · 6d ago CriticalCVSS 10.0KEVEPSS 1%

CVE-2026-114625 CVE-2026-16812 CVE-2026-93952 sql injection zero-day vco

vulnerability

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The U.S. CISA has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities list. Federal Civilian Executive Branch (FCEB) agencies are urged to apply the fixes by October 26, 2026, to mitigate…

The Hacker News · 4d ago CriticalCVSS 10.0KEVEPSS 1%

CVE-2026-110447 CVE-2026-114625 CVE-2026-16812 JP cisa exploited backdoor

news.mlab.sh

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud