Skip to content
Threat Feed
Subscribe

Product

VeloCloud Orchestrator

1 brief RSS
critical threat

Arista VeloCloud Orchestrator: SQL Injection Privilege Escalation (CVE-2026-114625)

Arista VeloCloud Orchestrator (VCO) is under active exploitation by attackers using a critical SQL injection vulnerability (CVE-2026-114625) to escalate from low-privilege tenant accounts to superuser operator status.

VeloCloud Orchestrator +2
1r 1t 1c 2i