Signalis
sign in--:--:--UTC
CVEs

CVE-2026-114625

exploited in the wild☆ pin
CVSS
—
Reports
3
First seen
Oct 22, 2026
Last seen
Oct 23, 2026
Affected product

Arista VeloCloud Orchestrator on-premises

Recent reports

High

Arista Networks VeloCloud Orchestrator vulnerability (CVE-2026-114625) exploited in the wild

Canadian Centre AlertsHigh

CISA Adds Arista VeloCloud Orchestrator SQL Injection to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesCritical

Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day

Bleeping Computer

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans