Skip to main content
Apexward Pulse
3 reportsPriority High

Arista VeloCloud Orchestrator SQL Injection Vulnerability

A newly disclosed SQL injection vulnerability in Arista VeloCloud Orchestrator has been added to CISA's known-exploited list, highlighting potential risks for organisations using the platform.

First report Latest

What is going on

  • Arisa VeloCloud Orchestrator was found to have a SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
  • CISA added the vulnerability to its known-exploited catalogue based on evidence of active exploitation.
  • The vulnerability is assigned the identifier CVE-2026-114625 and affects organisations using the Arista VeloCloud Orchestrator platform.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed