Cyber Security· Important
Critical SQL Injection vulnerability discovered in Arista VeloCloud Orchestrator
CISA has updated its Known Exploited Vulnerabilities (KEV) catalog to include a new, actively exploited SQL injection flaw in Arista VeloCloud Orchestrator. The vulnerability, tracked as CVE-2026-114625, allows attackers to potentially gain total control of affected assets.