Critical SQL Injection vulnerability discovered in Arista VeloCloud Orchestrator
In short: CISA has updated its Known Exploited Vulnerabilities (KEV) catalog to include a new, actively exploited SQL injection flaw in Arista VeloCloud Orchestrator. The vulnerability, tracked as CVE-2026-114625, allows attackers to potentially gain total control of affected assets.
This summary was generated automatically by AI from CISA Advisories's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1Addition of CVE-2026-114625 to the KEV catalog.
- 2Identification of active exploitation in the wild.
Why it matters
This vulnerability poses a significant risk to network infrastructure. Organizations using VeloCloud Orchestrator should prioritize patching to prevent unauthorized access and full system compromise.
What it means for AI agents and contact centers
If your infrastructure includes Arista VeloCloud Orchestrator, review your security patch status immediately. Monitor for signs of compromise as mandated by CISA for high-risk vulnerabilities, and ensure that any exposed management interfaces are secured against SQL injection attempts.
Sources
- CISA AdvisoriesOfficialPrimary sourceOriginal article →„CISA Adds One Known Exploited Vulnerability to Catalog“23 Oct 2026, 15:00Licence: US federal government work (17 U.S.C. §105) · our summary (content changed)
- Published by source
- 23 Oct 2026, 15:00
- Found by our system
- 23 Oct 2026, 21:37
- Summary generated
- 23 Oct 2026, 21:38
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy