Arista's VeloCloud flaw needs a login. The lowest one the product offers will do, and the advisory says no setting prevents it
2026-10-23Security
CVE-2026-114625 is a 9.9 SQL injection that Arista found itself and says is already being exploited. An Enterprise Read Only tenant account reaches local superuser on the orchestrator.