VeloCloud

Security incidents tagged VeloCloud. Newest first.

1 VeloCloud incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

CriticalPatched
Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
Arista patched an actively exploited critical SQL injection flaw (CVE-2026-114625, CVSS 9.9) in on-prem VeloCloud Orchestrator that lets any authenticated user gain operator privileges and masquerade as the local 'superuser operator'. Hosted VCO is already patched; on-prem admins need to upgrade.
Arista VeloCloud Orchestrator (VCO) On-PremSince Oct 22, 2026updated Oct 22, 2026, 19:31 UTC

Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
Dark Web Informer
@DarkWebInformer
🚨 Critical Arista VeloCloud Orchestrator SQL injection flaw actively exploited Arista has disclosed CVE-2026-114625, a critical vulnerability affecting on-premises VeloCloud Orchestrator deployments. ⠀ The SQL injection flaw allows any authenticated user, including someone t.co/YmvPfvAwhb
Oct 22, 2026view on x