Arista fixes third actively exploited VeloCloud flaw in three months

On October 22, 2026, Arista Networks fixed a VeloCloud Orchestrator zero-day vulnerability that attackers had already exploited. The vulnerability puts businesses at risk because it affects the system used to handle network connections across multiple sites. How a read-only account becomes a superuser Advisory 0199 of Arista identifies the vulnerability as CVE-2026-114625, an SQL-injection vulnerability...