HIGHVulnerability
Global

CVE-2026-114625: VeloCloud Orchestrator privilege escalation exploited in the wild. Read-only portal accounts can reach local superuser.

·Source: r/blueteamsec

Updated:

Executive Summary

[object Object]

Analysis

[object Object]

Indicators of Compromise (1)

CVE (1)
CVE-2026-114625
NVDMITRE CVE
Source Attribution

Originally published by r/blueteamsec on Oct 26, 2026.

Related Threats

HIGHVulnerability

CISA KEV: Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator SQL Injection Vulnerability

Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.

CVE-2026-114625Arista VeloCloud Orchestrator
CISA KEV
MEDIUMVulnerabilityNEW

Student SSNs and Medicaid IDs Exposed in Frontline School Software Breach

Kalleigh Lane reports: If your school district used Frontline Central or School Health Management, your Social Security number, date of birth, or government ID could have been caught up in a cybersecurity incident. That risk applies to some adults and minors whose information was processed through those products. Frontline Education announced Oct. 26, 2026, that...

DataBreaches.net
MEDIUMVulnerabilityNEW

GM settles with 36 states for selling driver data, agrees to $220 million fine and reforms

General Motors agreed to pay $220 million to settle a lawsuit filed by a coalition of 36 state attorneys general who alleged the company unlawfully sold information about driver behavior to outside parties.

The Record