CVE-2026-110264

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 22, 2026

Last Seen

October 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Arista Patches Critical SQL Injection Zero-Day in VeloCloud Orchestrator78.0

Arista Networks has released security updates for a critical zero-day vulnerability, CVE-2026-114625, affecting the VeloCloud Orchestrator (VCO) used in SD-WAN deployments. This flaw allows authenticated users with basic privileges to escalate their access to operator-level control through a low-com...

Critical PHP Vulnerabilities Prompt Global Website Shutdowns72.9

Two critical vulnerabilities in PHP, identified as CVE-2026-109618 and CVE-2026-109619, were disclosed on October 21, 2026, leading to widespread shutdowns of websites globally. These vulnerabilities, collectively known as PHP2Shell, allow unauthenticated remote code execution, affecting approximate...