{"cvss":9.4,"datePublished":"","dateUpdated":"","description":"Affected: Arista Networks / VeloCloud Orchestrator | Description: On an affected system, any authenticated user can gain operator privileges and masquerade as a local \"superuser operator\" user. This includes access to functionality that is intended for internal use only and which is not intended to be remotely accessible. | Patched since: 2026/10/22 | Exploitation type: unknown | CWEs: CWE-89 | Origin source: CSIRT-IE | Notes: https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199","dueDate":"","exploited":true,"id":"CVE-2026-114625","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"VeloCloud Orchestrator","severity":"CRITICAL","source":"circl_kev","title":"CVE-2026-114625","vendor":"Arista Networks"}