Known Exploited Vulnerabilities October 23, 2026 · CISA KEV Catalog

CVE-2026-114625: Arista Velo Cloud Orchestrator SQL Injection Vulnerability

Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

AristaCVE-2026-114625

Related

CISA Adds One Known Exploited Vulnerability to Catalog Cyber Risks · Oct 23, 2026

CVE-2026-93952: Arista Velo Cloud Orchestrator Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Sep 22, 2026

CVE-2026-16812: Arista Velo Cloud Orchestrator On-Prem OS Command Injection Vulnerability Known Exploited Vulnerabilities · Jul 27, 2026