{"revision":"5e8ed90babd24708bee2840fda06acd5","evidence":{"cve":"CVE-2026-114625","kev":{"cve":"CVE-2026-114625","product":"VeloCloud Orchestrator","name":"Arista VeloCloud Orchestrator SQL Injection Vulnerability","dateAdded":"2026-10-23","dueDate":"2026-10-26","knownRansomwareUse":false,"shortDescription":"Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.","vendor":"Arista","isMicrosoft":false,"products":[],"advisoryUrl":"https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199","msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114625","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-114625"},"epss":null,"observedAt":"2026-10-23T17:48:33.8006549+00:00","kevRetained":false,"reviewIdentity":"335a9ba664203e4b421027b5"}}