Three exploited flaws in the same SD-WAN orchestrator in three months.
On Thursday 22 October, Arista published Security Advisory 0199 for CVE-2026-114625, a SQL injection in on-premises VeloCloud Orchestrator rated CVSS 9.9. The next day, CISA…
Read the brief