Critical 9.9
CVE-2026-114625
Active Exploitation of Critical SQL Injection Vulnerability CVE-2026-114625 in Arista VeloCloud Orchestrator
Vendor / product: Arista VeloCloud Orchestrator
Event date: 2026-10-22
Public PoC: Yes
First tracked by RiskWire: 2026-10-23
Sources & citations (31)
- Critical VeloCloud Orchestrator SQL Injection Vulnerability Exploited in the Wild: Arista Issues Security Warning + Video undercodenews.com · 2026-10-23
- Arista VeloCloud Orchestrator Zero-Day Under Active Attack: Critical SQL Injection Could Turn Read-Only Accounts Into Superusers + Video undercodenews.com · 2026-10-22
- Arista Patches Actively Exploited VeloCloud Orchestrator SQL Injection Flaw as LiteLLM Supply-Chain Attack Exposes Secrets + Video undercodenews.com · 2026-10-23
- Arista schließt ausgenutzte VeloCloud Zero-Day-Lücke, während SD-WAN-Risiken steigen cryptopolitan.com · 2026-10-23
- Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern dev.to · 2026-10-22
- Arista patches new VeloCloud Orchestrator zero-day exploited in attacks gixtools.net · 2026-10-22
- Arista parchea una vulnerabilidad de día cero en VeloCloud ya explotada mientras crecen los riesgos del SD-WAN cryptopolitan.com · 2026-10-23
- 아리스타, SD-WAN 위협 고조 속 악용된 벨로클라우드 제로데이 패치 cryptopolitan.com · 2026-10-23
- Arista patches exploited VeloCloud zero-day as SD-WAN risks mount cryptopolitan.com · 2026-10-23
- Arista corrige zero-day do VeloCloud explorado enquanto riscos de SD-WAN aumentam cryptopolitan.com · 2026-10-23
- Arista закрыла эксплуатируемую уязимость нулевого дня в VeloCloud на фоне растущих рисков SD-WAN cryptopolitan.com · 2026-10-23
- CVE-2026-114625 in VeloCloud Orchestrator is actively exploited secnews.gr · 2026-10-22
- Arista fixes third actively exploited VeloCloud flaw in three months cryptocompass.com · 2026-10-23
- Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild securityonline.info · 2026-10-22
- Arista corregge la zero-day di VeloCloud sfruttata mentre crescono i rischi SD-WAN cryptopolitan.com · 2026-10-23
- أريستا تُصلح ثغرة يوم صفر في VeloCloud المستغلة مع تصاعد مخاطر SD-WAN cryptopolitan.com · 2026-10-23
- Arista 修复遭主动利用的 VeloCloud Orchestrator 零日漏洞 mezha.net · 2026-10-22
- Arista修复遭利用的VeloCloud零日漏洞，SD-WAN风险加剧 cryptopolitan.com · 2026-10-23
- Arista corrige une faille zero-day exploitée sur VeloCloud alors que les risques SD-WAN s'aggravent cryptopolitan.com · 2026-10-23
- VeloCloud Orchestrator Zero-Day expertinthecloud.co.za · 2026-10-23
+11 more sources
References
See CVE-2026-114625 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →