Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:arista:velocloud_orchestrator:*:*:*:*:*:*:*:*

2 briefs RSS
critical threat

Arista VeloCloud Orchestrator: SQL Injection Privilege Escalation (CVE-2026-114625)

Arista VeloCloud Orchestrator (VCO) is under active exploitation by attackers using a critical SQL injection vulnerability (CVE-2026-114625) to escalate from low-privilege tenant accounts to superuser operator status.

VeloCloud Orchestrator +2
1r 1t 1c 2i
high threat

Fortinet FortiOS CVE-2025-68686 Sensitive Information Exposure Bypass

A remote unauthenticated attacker can exploit CVE-2025-68686 in Fortinet FortiOS to bypass a previously applied patch, allowing sensitive information exposure and enabling persistence post-exploitation, provided the product was already compromised at the filesystem level via another vulnerability.

exploited PoC FortiOS +7 fortinet vulnerability cve exposure persistence
1t 3c 4i updated