SecurityBleepingComputerabout 1 hour ago
Arista Patches Exploited VeloCloud Zero-Day
2 min read
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator On-Prem deployments. Tracked as CVE-2026-114625, this critical-severity flaw allows attackers to escalate privileges through low-complexity SQL injection attacks. The company patched hosted VCO deployments running version 5.2.3.18 or later, 6.1.3.10 or later, and 6.4.2.12 or later.
Level
Hype check
Tap to vote and see what everyone thinks.