Arista patches exploited VeloCloud Orchestrator SQLi zero-day
CVE-2026-114625 (CVSS 9.9), a SQL injection in on-prem VeloCloud Orchestrator, is exploited in the wild. An authenticated tenant user reaches operator privileges. Fix: 5.2.3.18/6.1.3.10/6.4.2.12.