Arista fixes actively exploited VeloCloud Orchestrator zero day vulnerability
Arista Networks released security updates to patch a critical zero-day SQL injection flaw in VeloCloud Orchestrator that is currently under active exploitation.
FTMQ Security, written by our newsroom0 views
Arista Networks has issued security patches for a critical zero-day vulnerability in VeloCloud Orchestrator On-Prem deployments, Mezha.net and BleepingComputer reported. The flaw is tracked as CVE-2026-114625 and is currently being exploited in real-world attacks. [1][2][3][4]
According to The Hacker News, the bug is a SQL injection vulnerability within VeloCloud Orchestrator. VeloCloud Orchestrator serves as a web-based central management system that allows network administrators to configure, monitor, and control Software-Defined Wide Area Networks and connected edge devices, BleepingComputer and The Hacker News reported. [2][5]
BleepingComputer reported that the vulnerability allows attackers with basic privileges and access to the web interface to exploit the system. Arista Networks released an official security advisory detailing the issue on October 22, according to The Hacker News. [2][5]
The zero-day flaw specifically affects VeloCloud Orchestrator On-Prem instances, BleepingComputer and SC Media reported. System administrators are advised to apply the security updates immediately to secure their VeloCloud SD-WAN deployments. [2][6]
In short
- Arista Networks patched a zero-day vulnerability in VeloCloud Orchestrator On-Prem deployments.
- The critical flaw is identified as CVE-2026-114625 and involves a SQL injection vector.
- Attackers with basic web interface privileges can exploit the security bug.
- Arista disclosed the vulnerability and released patches on October 22.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Arista patches actively exploited VeloCloud Orchestrator zero-dayMezha.net, 11h ago (the report this story comes from)
- [2]Arista patches new VeloCloud Orchestrator zero-day exploited in attacksBleepingComputer, 11h ago
- [3]Arista patches new VeloCloud Orchestrator zero-day exploited in attacksBleepingComputer, 11h ago
- [4]Arista patches new VeloCloud Orchestrator zero-day exploited in attacksBleepingComputer, 11h ago
- [5]Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksThe Hacker News, 9h ago
- [6]Arista Networks patches actively exploited zero-day vulnerability in VeloCloud OrchestratorSC Media, 5h ago
Background
- [7]VMware on Wikipedia
- [8]Adobe Inc. on Wikipedia
Our newsroom writes these reports with the help of software, from the 8 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- Cisco patches 34 security vulnerabilities across multiple enterprise product linesTop Stories, 17h ago
- Terra Security finds sharp rise in broken software patches during 2026Bugs and Patches, 3d ago
More in Bugs and Patches
- Linux kernel vulnerabilities exposed publicly before patches are released4h ago
- PHP maintainers issue emergency updates for two critical code execution vulnerabilities4h ago
- PHP releases emergency patches for two critical remote code execution flaws4h ago
- PHP developers prepare emergency patches for two critical remote execution flaws1d ago
- Chinese state hackers exploited BeyondTrust zero-day flaw for seven weeks3d ago
- Terra Security finds sharp rise in broken software patches during 20263d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.