News · via SOCRadar
CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access
Arista has disclosed CVE-2026-114625, a critical SQL injection vulnerability in on-premises VeloCloud Orchestrator deployments. The flaw is being exploited in the wild and allows any authenticated…