Arista says VeloCloud Orchestrator vulnerability CVE-2026-114625, a CVSS 9.9 SQL injection, is exploited in the wild. Upgrade on-prem VCO now. Related Posts: PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates The post Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild appeared first on Da