Arista fixes exploited VeloCloud SQL flaw

Arista Networks says attackers are exploiting a SQL-injection vulnerability in its VeloCloud Orchestrator software and has issued fixes for affected on-premises release branches. The company’s October 22 security advisory says the flaw can let a user with a valid login and an Enterprise Read Only account gain operator privileges, provided the attacker can reach the orchestrator’s web interface. The vulnerability is tracked as CVE-2026-114625. Arista says it has observed exploitation, but its advisory does not identify which orchestrators were affected, when attacks began or what attackers did after gaining access. The scale and consequences of any intrusions are therefore not established by the advisory. For on-premises deployments, Arista lists version 5.2.3.18 or later, 6.1.3.10 or later, and 6.4.2.12 or later as fixed releases in their respective branches. Earlier releases in those branches are affected. The company says hosted and dedicated VeloCloud deployments have also been patched. Its advisory does not assess releases that have reached end of support. Arista identifies 74.82.197.86 and 38.54.50.151 as addresses observed in attacks exploiting the flaw. It advises...