HIGHVulnerability
Verified
Global

CISA KEV: Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator SQL Injection Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.

Analysis

Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Added to CISA Known Exploited Vulnerabilities catalog on 2026-10-23. Remediation due: 2026-10-26.

Indicators of Compromise (1)

CVE (1)
CVE-2026-114625
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Oct 23, 2026. Verified by: CISA.

Related Threats

HIGHVulnerability

CVE-2026-114625: VeloCloud Orchestrator privilege escalation exploited in the wild. Read-only portal accounts can reach local superuser.

[object Object]

CVE-2026-114625
r/blueteamsec
HIGHVulnerability

CISA KEV: Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.

CVE-2026-93952Arista VeloCloud Orchestrator
CISA KEV
HIGHVulnerability

CISA KEV: Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.

CVE-2026-16812Arista VeloCloud Orchestrator
CISA KEV