Arista fixes third actively exploited VeloCloud flaw in three months
-
Arista patches exploited VeloCloud zero-day as SD-WAN risks mount Arista patched a 9.9-rated VeloCloud Orchestrator SQL-injection flaw already exploited by attackers.
The vulnerability can let a read-only authenticated user gain operator privileges and impersonate a superuser. It is the third actively exploited VeloCloud Orchestrator vulnerability disclosed since July.
On October 22, 2026, Arista Networks fixed a VeloCloud Orchestrator zero-day vulnerability that attackers had already exploited. The vulnerability puts businesses at risk because it affects the system used to handle network connections across multiple sites.
How a read-only account becomes a superuser Advisory 0199 of Arista identifies the vulnerability as CVE-2026-114625, an SQL-injection vulnerability rated 9.9 under CVSS v3.1.
-
© Cryptopolitan
-
Arista patches exploited VeloCloud zero-day as SD-WAN risks mount Arista patched a 9.9-rated VeloCloud Orchestrator SQL-injection flaw already exploited by attackers.
The vulnerability can let a read-only authenticated user gain operator privileges and impersonate a superuser. It is the third actively exploited VeloCloud Orchestrator vulnerability disclosed since July.
On October 22, 2026, Arista Networks fixed a VeloCloud Orchestrator zero-day vulnerability that attackers had already exploited. The vulnerability puts businesses at risk because it affects the system used to handle network connections across multiple sites.
How a read-only account becomes a superuser Advisory 0199 of Arista identifies the vulnerability as CVE-2026-114625, an SQL-injection vulnerability rated 9.9 under CVSS v3.1.
-
© Cryptopolitan