CVE-2026-7473

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 22, 2026

Last Seen

October 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Arista Patches Critical SQL Injection Zero-Day in VeloCloud Orchestrator78.0

Arista Networks has released security updates for a critical zero-day vulnerability, CVE-2026-114625, affecting the VeloCloud Orchestrator (VCO) used in SD-WAN deployments. This flaw allows authenticated users with basic privileges to escalate their access to operator-level control through a low-com...