sql-injection

Arista's October 22 VeloCloud flaw turns read-only into operator

Arista's VeloCloud Orchestrator has an exploited zero-day SQL injection, CVE-2026-114625 at CVSS 9.9, escalating read-only accounts to operator.