Serial number: AV26-1080
Date: October 23, 2026
As of October 22, 2026, Arista Networks is affected by a vulnerability in the following product:
- VeloCloud Orchestrator (VCO)
- Prior to 5.2.3.18
- Prior to 6.1.3.10
- Prior to 6.4.2.12
Arista Networks indicates that CVE-2026-114625 is exploited in the wild.
Update 1
On October 23, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-114625 to their Known Exploited Vulnerabilities (KEV) Database.
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.