Sources (4)
- bleeping · bleeping
- securityweek · securityweek
- cisa_advisories · cisa_advisories
- cccs · cccs
What this means for you — Security leader:Patch VeloCloud Orchestrator on-prem to at least 5.2.3.18, 6.1.3.10 or 6.4.2.12 immediately; CISA has listed CVE-2026-114625 in the KEV catalog.
What this means for you — Lean IT orgs:If you run VeloCloud Orchestrator on-prem, update it to the latest version right away; most lean-IT teams use the hosted service and can ignore this.
What this means for you — MSP:Check every client running on-prem VeloCloud Orchestrator and patch to 5.2.3.18 / 6.1.3.10 / 6.4.2.12 now; this is the third VCO zero-day exploited in four months.
What this means for you — Researcher:Arista VeloCloud Orchestrator CVE-2026-114625 (SQLi) is confirmed exploited in the wild and added to CISA KEV; patch versions released.