KNOWN EXPLOITED VULNERABILITY DOSSIER
CVE-2026-114625
Arista · VeloCloud Orchestrator
Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.
Correlated Federal Court Cases & Exploitation Context (0)
No federal court indictment in the current archive directly cites CVE-2026-114625. This record tracks its addition to the CISA Known Exploited Vulnerabilities (KEV) catalog on 2026-10-23.
Associated Government Advisories
Tracked under CISA Known Exploited Vulnerabilities Binding Operational Directive 22-01 for federal civilian agency remediation.