VeloCloud Orchestrator CVE-2026-114625: A Read-Only Login Can Become Full Control
Arista VeloCloud SD-WAN Orchestrator has an exploited SQL injection (CVSS 9.9). Any logged-in user, even read-only, can become operator. Fixes and checks.
- Home
- Blog
Tech Blog
Field notes from real incidents: what broke, how we found it, and the fix. No fluff.