{"id":"CVE-2026-114625","url":"https://compromised.live/t/CVE-2026-114625","kind":"exploited_vuln","tier":1,"severity":"high","title":"Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator SQL Injection Vulnerability","summary":"Attackers can send specially crafted database queries to reach privileged internal functions and affect the orchestrator host, and this flaw is being actively exploited. Arista VeloCloud Orchestrator on-prem. Apply the vendor's mitigations or update now, and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-23","due_date":"2026-10-26","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.","aliases":["CVE-2026-114625"],"sources":[{"name":"kev","id":"CVE-2026-114625","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114625"}]}