macc /
EN FR
Book a meeting
← Back to console
High CISA KEV · USA CVE-2026-114625

Arista VeloCloud Orchestrator SQL Injection Vulnerability

Published

Description

Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.