PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-114625 Arista CVE debrief

CVE-2026-114625 debrief based on the supplied source corpus. The CVE record was published on 2026-10-23T00:00:00.000Z and has not been modified since then. The vulnerability is a SQL injection attack in Arista VeloCloud Orchestrator, which could allow an attacker to manipulate the database. Defenders responsible for Arista VeloCloud Orchestrator deployments should assess exposure and prioritize mitigation according to CISA's BOD 26-04 guidance. The CISA Known Exploited Vulnerabilities catalog lists this vulnerability as known to be exploited in the wild, with a due date for mitigation of 2026-10-26.

Vendor
Arista
Product
VeloCloud Orchestrator
CVSS
CRITICAL 9.9
CISA KEV
Listed
Original CVE published
2026-10-23
Original CVE updated
2026-10-23
Advisory published
2026-10-23
Advisory updated
2026-10-23

Who should care

Defenders responsible for Arista VeloCloud Orchestrator deployments should assess exposure and prioritize mitigation according to CISA's BOD 26-04 guidance.

Why it matters

CVE-2026-114625 is a SQL injection vulnerability in Arista VeloCloud Orchestrator, listed as known to be exploited in the wild by CISA. Defenders should verify exposure, apply mitigations, and ensure compliance with CISA's BOD 26-04 guidance.

  • Verify exposure of Arista VeloCloud Orchestrator deployments to this SQL injection vulnerability
  • Apply mitigations according to vendor instructions to prevent potential database manipulation
  • Ensure compliance with CISA's BOD 26-04 guidance for prioritizing security updates

Technical summary

The Arista VeloCloud Orchestrator is vulnerable to a SQL injection attack, which could allow an attacker to manipulate the database. This vulnerability is listed as known to be exploited in the wild by CISA. Defenders should verify exposure, apply mitigations, and ensure compliance with CISA's BOD 26-04 guidance. The vulnerability affects Arista VeloCloud Orchestrator deployments, and defenders should prioritize verifying exposure and applying mitigations according to vendor instructions.

Defensive priority

Defenders should prioritize verifying exposure and applying mitigations according to vendor instructions, ensuring compliance with CISA's BOD 26-04 guidance.

Recommended defensive actions

  • Verify exposure of Arista VeloCloud Orchestrator to this SQL injection vulnerability
  • Apply mitigations in accordance with Arista's vendor instructions
  • Ensure compliance with CISA's BOD 26-04 Prioritizing Security Updates Based on Risk guidance

Evidence notes

The CISA Known Exploited Vulnerabilities catalog lists this vulnerability as known to be exploited in the wild, with a due date for mitigation of 2026-10-26.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-114625 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-114625

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-114625 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-114625

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

  • CISA Known Exploited Vulnerabilities catalog

    Publisher, destination, and source semantics verified

    URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

    Cybersecurity and Infrastructure Security Agency - Official CISA catalog of vulnerabilities known to be exploited in the wild.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.