News
CVE-2026-114625: Arista VeloCloud Orchestrator SQL injection (CVSS 9.9) exploited; fixed in 5.2.3.18, 6.1.3.10, 6.4.2.12
Arista says a SQL injection in on-prem VeloCloud Orchestrator is already exploited; even a read-only account can gain operator rights, and earlier fixes don't cover it.
audiotale.net team6 min read