24 October 2026
Reference: CVE-2026-114625
1. What is being reported?
The Arista VeloCloud Orchestrator, a tool used to manage network connections, has a security issue that allows any user who can log in to gain superuser privileges. This means they could access sensitive internal functions not meant for remote use, potentially compromising the system and data.
2. What this means in plain English
If your organisation uses this software on-site, an attacker who gets access to a user account could take over the system, leading to data breaches or disruption of services. This risk is critical because it affects the confidentiality, integrity, and availability of your network management.
3. Could this affect a small business?
Small businesses or charities using the on-premises version of VeloCloud Orchestrator could be affected. Those using hosted or cloud versions have likely already received patches. If you do not use this product, you are not affected.
4. What to do now
- Check if your organisation uses Arista VeloCloud Orchestrator on-premises.
- If yes, contact your IT provider immediately to confirm if the latest security updates or mitigations have been applied.
- Follow any vendor instructions carefully to apply patches or mitigations as soon as possible.
- If patches are not available, consider discontinuing use of the product until it is secured.
5. Ask your IT provider
Can you confirm whether our on-premises Arista VeloCloud Orchestrator has been patched against the CVE-2026-114625 vulnerability, and what steps are in place to protect us from this critical security issue?
6. Bottom line
If you use Arista VeloCloud Orchestrator on-site, act quickly to ensure it is updated to prevent attackers from gaining full control.
Information based on CISA KEV, NVD, and reputable security reporting.