Skip to content
Threat Feed
Subscribe

Product

VeloCloud Orchestrator (< 5.2.3.18, < 6.1.3.10, < 6.4.2.12)

1 brief RSS
critical threat

Arista VeloCloud Orchestrator: SQL Injection Privilege Escalation (CVE-2026-114625)

Arista VeloCloud Orchestrator (VCO) is under active exploitation by attackers using a critical SQL injection vulnerability (CVE-2026-114625) to escalate from low-privilege tenant accounts to superuser operator status.

VeloCloud Orchestrator +1
1r 1t 1c 2i