News VeloCloud Orchestrator Vulnerability: A Read-Only Login Is Enough, and Attackers Are Using It by Rebecca Sutton October 23, 2026 by Rebecca Sutton October 23, 2026 Arista has confirmed attacks on CVE-2026-114625, a 9.9-rated SQL injection that turns a read-only login into operator control of VeloCloud Orchestrator. Here is who is affected and what to do. FacebookTwitterLinkedinEmail