Arista

Vulnerabilities & Exploits

Arista VeloCloud and Collabora Nextcloud Flaws Exploited in the Wild
BySecaix October 29, 2026

Attackers are exploiting a critical SQL injection flaw in Arista VeloCloud Orchestrator and a command-injection flaw in the Collabora Online Built-in CODE Server for Nextcloud. Administrators should apply the available updates and investigate systems for signs of compromise.

Read More Arista VeloCloud and Collabora Nextcloud Flaws Exploited in the Wild
Schwachstellen & Exploits

VeloCloud-Orchestrator: Arista schließt aktiv ausgenutzte SQL-Injection-Lücke
BySecaix October 22, 2026

Arista warnt vor CVE-2026-114625 in VeloCloud Orchestrator. Für On-Premises-Installationen stehen korrigierte Versionen bereit; bis zum Update gelten Einschränkungen beim Zugriff und Log-Prüfungen.

Read More VeloCloud-Orchestrator: Arista schließt aktiv ausgenutzte SQL-Injection-Lücke
Vulnerabilities & Exploits

Arista Patches Exploited VeloCloud Orchestrator Zero-Day
BySecaix October 22, 2026

Arista says attackers are exploiting CVE-2026-114625 in VeloCloud Orchestrator. Administrators should install the fixed on-premises releases or restrict access and investigate logs until upgrading is possible.

Read More Arista Patches Exploited VeloCloud Orchestrator Zero-Day