‼️ Critical VeloCloud SQL injection flaw exploited in the wild.
Tracked as CVE-2026-114625 (CVSS 9.9), the flaw lets even read-only users escalate to full operator privileges.
Arista confirms active attacks.
What admins need to know ↓ https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html
The Hacker NewsArista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksAttackers are exploiting CVE-2026-114625 in VeloCloud Orchestrator, allowing logged-in users to gain full operator privileges.