Tag: cve 2026 114625

1 article

Network operations center with a console in the background and an unoccupied workstation in the foreground.

Arista Discloses Zero-Day SQL Flaw in VeloCloud Orchestrator

A critical zero-day SQL flaw in Arista's VeloCloud Orchestrator has been actively exploited in the wild, allowing attackers to gain top-level control with a 9.9 CVSS score. This severe vulnerability can be triggered by any user with a valid login, including those with limited Enterprise Read Only role access.

Analyst 207