Will CVE-2026-114625 (Arista VeloCloud SQLi) lead to documented breach by Dec 2026?

CISA added CVE-2026-114625 (Arista VeloCloud Orchestrator SQL Injection) to its Known Exploited Vulnerabilities catalog on Oct 24, 2026, indicating active exploitation in the wild. VeloCloud Orchestrator is used by enterprises for SD-WAN management. Source: CISA Alerts.

Resolution Criteria

Documented breach or unauthorized access to VeloCloud-managed networks reported by Arista, CISA, or credible security researchers; OR active exploitation confirmed by firewall/IDS telemetry in a published incident report; OR vendor advisory confirming customer impact.