Arista Networks security advisory (AV26-1080) – Update 1
Serial number: AV26-1080 Date: October 23, 2026 As of October 22, 2026, Arista Networks is affected by a vulnerability in the following product: VeloCloud Orchestrator (VCO) Prior to 5.2.3.18 Prior to 6.1.3.10 Prior to 6.4.2.12 Arista Networks indicates that CVE-2026-114625 is exploited in the wild.
Summary from Canadian Centre for Cyber Security.
Explained
The technology and terms in this story. Learn more
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.
Related coverage
Other sources covering the same vulnerabilities or event.