Arista Product Security Update Advisory (CVE-2026-114625)

Arista Product Security Update Advisory (CVE-2026-114625)
  • A security update has been released to address a vulnerability in Arista products.
  • The affected product is VeloCloud Orchestrator (VCO) On-Prem.
  • The vulnerability addressed is CVE-2026-114625, which is a privilege escalation vulnerability.
  • Affected Versions include VCO On-Prem prior to 5.2.3.18, Prior to 6.1.3.10, And prior to 6.4.2.12.
  • A Vulnerability Patch has been provided via the latest update.
  • Arista recommends updating VCO On-Prem to version 5.2.3.18 Or later, 6.1.3.10 Or later, or 6.4.2.12 Or later, following the instructions on the reference site.