Is CVE-2026-114625 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-114625

Organizations using Arista VeloCloud Orchestrator should apply vendor patches immediately. CISA encourages rapid remediation per Binding Operational Directive 26-04. Agencies should check for threat actor compromise before applying patches. All organizations are encouraged to adopt risk-based vulnerability management practices and prioritize remediation of KEV Catalog vulnerabilities on publicly exposed assets.

Quick answers

What is CVE-2026-114625?: Organizations using Arista VeloCloud Orchestrator should apply vendor patches immediately. CISA encourages rapid remediation per Binding Operational Directive 26-04. Agencies should check for threat actor compromise before applying patches. All organizations are encouraged to adopt risk-based vulnerability management practices and prioritize remediation of KEV Catalog vulnerabilities on publicly exposed assets.
How severe is CVE-2026-114625?: high
Is CVE-2026-114625 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-114625 be mitigated?: Organizations using Arista VeloCloud Orchestrator should apply vendor patches immediately. CISA encourages rapid remediation per Binding Operational Directive 26-04. Agencies should check for threat actor compromise before applying patches. All organizations are encouraged to adopt risk-based vulnerability management practices and prioritize remediation of KEV Catalog vulnerabilities on publicly exposed assets.

CVSS

—

Vendor

Arista Networks

Published

Oct 27, 2026 · 02:58

Patch

Unknown / not confirmed

Affected products

VeloCloud Orchestrator

Mitigation

CISA Adds Arista VeloCloud Orchestrator SQL Injection to Known Exploited Vulnerabilities Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-114625, a SQL injection vulnerability in Arista VeloCloud Orchestrator, to its Known Exploited Vulnerabilities (KEV) Catalog. The addition is based on evidence of active exploitation. The vulnerability affects Arista VeloCloud Orchestrator and poses significant risks to federal enterprise networks, particularly on publicly exposed assets. CISA's Binding Operational Directive 26-04 requires Federal Civilian Executive Branch agencies to prioritize rapid remediation of KEV Catalog vulnerabilities on exposed assets and to check for prior compromise before patching.

12m

CVE-2026-114625

Quick answers

Related News

CISA Adds Arista VeloCloud Orchestrator SQL Injection to Known Exploited Vulnerabilities Catalog