cve-2026-114625

{
  "cvss": 9.4,
  "datePublished": "",
  "dateUpdated": "",
  "description": "Affected: Arista Networks / VeloCloud Orchestrator | Description: On an affected system, any authenticated user can gain operator privileges and masquerade as a local \"superuser operator\" user. This includes access to functionality that is intended for internal use only and which is not intended to be remotely accessible. | Patched since: 2026/10/22 | Exploitation type: unknown | CWEs: CWE-89 | Origin source: CSIRT-IE | Notes: https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199",
  "dueDate": "",
  "exploited": true,
  "id": "CVE-2026-114625",
  "kev_catalogs": [
    "circl"
  ],
  "knownRansomwareCampaignUse": "",
  "product": "VeloCloud Orchestrator",
  "severity": "CRITICAL",
  "source": "circl_kev",
  "title": "CVE-2026-114625",
  "vendor": "Arista Networks"
}