Why it is trending

CVE-2026-114625

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrit

Act now

CVSS 9.4
CIRCL KEV
CISA KEV
CISA SSVC: active
ENISA KEV
VulnCheck KEV
Public PoC

Buzz: 79discussion, 0-100
Danger: 80exploitability, 0-100
Mentions: 40since 22 Oct 2026
EPSS: 0.6%exploit probability

Mentions Per Day · UTCpeak 27

29 days agoToday

Where The Talk Is · by platform40 total

X39 mentions · 28 voices
Dark web1 mentions · count only
Out of 40 mentions in total. We show how many, never what was said or where.

Newest Public Posts · plain text, newest first

X

O VeloCloud Orchestrator on-prem da Arista tem zero-day sendo explorado (CVE-2026-114625, CVSS 9.9). Qualquer login, até o read only, vira superuser via SQL injection. Entrou hoje no KEV da CISA. Atualiza pra 5.2.3.18, 6.1.3.10 ou 6.4.2.12 e tira o portal da internet.
@fredmdl56 min agolikes 0views 5replies 0Open
Arista VeloCloud Orchestrator SQL Injection Vulnerability (CVE-2026-114625) Critical SQL injection in on-prem Arista VeloCloud Orchestrator (CVE-2026-114625) allows low-privilege users to compromise the… Full write-up → link in bio #cybersecurity #infosec #cve #kev #arista https://t.co/g4te8NNUDX
@HotaSamit3 h agolikes 0views 10replies 0Open
🛡️ We added CVE-2026-114625, an SQL injection vulnerability affecting Arista VeloCloud Orchestrator, to the KEV Catalog. Visit https://t.co/myxOwap1Tf & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec https://t.co/fmGuZboUxk
@CISACyber5 h agolikes 2views 860replies 0Open
Arista VeloCloud Orchestrator on-prem SQLi CVE-2026-114625 is being exploited. Disclosed yesterday, Oct 22. In CISA KEV today, due Oct 26. Any logged-in user, even read-only, can become superuser operator. CVSS 9.9. Fixed: 5.2.3.18, 6.1.3.10, 6.4.2.12 https://t.co/cSVL3yBf3K
@ThreatWire_5 h agolikes 1views 29replies 0Open
Arista just patched ANOTHER exploited VeloCloud Orchestrator zero-day 🚨 CVE-2026-114625 scores 9.9, is under attack now, and is the third in four months. Patch today. https://t.co/6LnXF9hKFs #CyberSecurity #ZeroDay
@Kingfish7376 h agolikes 0views 7replies 0Open
KEV entry for CVE-2026-114625: https://t.co/VR6yKk0Iza Our write-up with fixed versions and the account cleanup list: https://t.co/do8vlhDL6D Hosted and Dedicated VCO are already patched by Arista. This one's on-prem.
@cybermergemedia6 h agolikes 0views 5replies 0Open
Arista segnala attacchi contro CVE-2026-114625 in VeloCloud Orchestrator: aggiornamenti, requisiti e indicatori di compromissione. #internet #cybersecurity #sicurezza #software https://t.co/AFF4j19lyi https://t.co/jGEY0jQ77Y
@SoTutto_it6 h agolikes 0views 5replies 0Open
VeloCloud Orchestrator On-Prem has an actively exploited SQL injection, CVE-2026-114625 (CVSS 9.9). Per Arista, any logged-in user, even Enterprise Read Only, can become the "superuser operator" of the portal that manages your SD-WAN edges. https://t.co/77dByrAKFK
@WoldLabs7 h agolikes 0views 12replies 1Open
SD-WAN管理ツールVeloCloud Orchestrator（オンプレ版）の脆弱性CVE-2026-114625が悪用中。CVSS 9.9。閲覧専用の最低権限アカウントでも管理者級の権限を奪える。 6.4.2.12以降などへ更新を。それまで管理画面は管理用ネットワークだけに。 #脆弱性
@rMATLAB_x7 h agolikes 0views 4replies 0Open
𝗣𝗥𝗜𝗹𝗹𝗢 𝘅𝗲𝗹𝗼𝗮𝗹𝗱 𝗢𝗳𝗰𝗵𝗲𝗹𝗹𝗰𝗻: 𝗧𝗵𝗽𝗳𝗱 𝗟𝗲𝗿𝗼-𝗗𝗲𝗼 𝗽𝗻 𝗙𝗼𝗾𝗿 𝗠𝗼𝗻𝗳𝗵𝗹 — 𝗣𝗩𝗦𝗦 𝟿.𝟿 𝗦𝗤𝗟 𝗜𝗻𝗷𝗲𝗰𝗳𝗽𝗼𝗻 𝗚𝗳𝗲𝗻𝗳𝗹 𝗙𝗲𝗹𝗹 𝗦𝗗-𝗨𝗔𝗙 𝗣𝗼𝗻𝗳𝗿𝗼𝗹. CVE-2026-114625 allows any authenticated user — including read-only customer accounts — to escalate to operator privilege on…
@morphisec7 h agolikes 0views 7replies 0Open

Public PoC Repositories · third-party code0 links

No public proof-of-concept links on record.

Links are collected from public posts and are not reviewed by Brandefense. Exploit code can be unsafe or malicious: only study it in an isolated lab, and never run it against systems you do not own.

Get a morning brief and an alert the moment a critical vulnerability like this one starts trending.