Topic

Cve 2026 114625

Coverage tagged cve 2026 114625.

Articles: 1
Desk: 1

Data graphic: a 2026 timeline of the four Arista advisories that say a flaw is exploited 5 May, 27 Jul, 22 Sep and 22 Oct , ending in orange at CVE-2026-114625, a VCO SQL injection Arista scores CVSS 9.9 that any logged-in user can exploit, even read-only. The fix is VCO On-Prem 5.2.3.18, 6.1.3.10 or 6.4.2.12.

criticalExploits Cve 2026 114625

Arista VeloCloud Orchestrator SQL Injection CVE-2026-114625 Is Under Active Attack, and Any Read-Only Login Is Enough

Arista says CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator On-Prem, is exploited. Any login, even read-only, reaches superuser.

Oct 22 · 5 min