Arista VeloCloud Orchestrator SQL injection CVE-2026-114625 added to CISA KEV
1. Executive summary Arista has patched an actively exploited SQL injection in on-premises VeloCloud Orchestrator (VCO), tracked as CVE-2026-114625 and rated CVSS 9.
23 Oct 2026 · 7 min read
read →