vulnhighUnderground · Vulnerability
KEV agrega CVE-2026-114625 — Arista / VeloCloud Orchestrator
Ocurrido23 oct 2026 · 00:00 UTC
Detectado24 oct 2026 · 13:00 UTC
FuenteUnderground · Vulnerability
Ref. externaCVE-2026-114625
Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.
- cve_id
- CVE-2026-114625
- vendor_product
- Arista / VeloCloud Orchestrator