Arista Networks VeloCloud Orchestrator SQL injection vulnerability

Versions prior to Arista Networks VeloCloud Orchestrator 5.2.3.18, versions prior to 6.1.3.10, and versions prior to 6.4.2.12 contain an SQL injection vulnerability. This vulnerability arises because authenticated users can obtain operator privileges and impersonate as the locally accessible...

Security Advisory 0199

Security Advisory 0199 . CSAF PDF Date: October 22, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 22, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-114625 CVSSv3.1 Base Score: 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 9.4...