Arista Networks has released security updates to address an actively exploited zero-day vulnerability in its VeloCloud Orchestrator (VCO) on-premises deployments, the company confirmed. The critical-severity flaw, tracked as CVE-2026-114625, allows authenticated attackers to escalate privileges via SQL injection and access internal functionality.
company
Arista Networks
US networking technology company