CVE-2026-114625

Vendor

Arista Networks

Product

VeloCloud Orchestrator

CVSS

9.9

EPSS

0.010 (p64)

CISA KEV

added 23 Oct 2026, due 26 Oct 2026 (6d overdue)

Weakness

CWE-89

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 93
   KEV NVD 9d ago

   Arista VeloCloud Orchestrator SQL Injection Vulnerability

   Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the…

   KEV · due 26 Oct 2026 (overdue) CVSS 9.9 Fix available CVE-2026-114625 Arista Networks
2. 65
   CISA alert CISA 8d ago

   CISA Adds One Known Exploited Vulnerability to Catalog

   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnerability This type of…

   Exploited CVE-2026-114625 Arista Networks
3. 33
   Research Check Point Research 5d ago

   26th October – Threat Intelligence Report

   For the latest discoveries in cyber research for the week of 26th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japanese cloud hosting provider Onamae Desktop Cloud has confirmed a…

   EPSS 1.00 CVE-2026-109618CVE-2026-109619CVE-2026-115560+2 more
4. 22
   CCCS advisory CCCS 8d ago

   Arista Networks security advisory (AV26-1080)

   CVE-2026-114625 Arista Networks