Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access
Excerpt
Arista has disclosed CVE-2026-114625 , a critical SQL injection vulnerability in on-premises VeloCloud Orchestrator deployments. The flaw is being exploited in the wild and allows any authenticated portal user, including an Enterprise Read Only account, to gain local superuser operator privileges. Organizations should upgrade immediately to the fixed release for their branch, restrict the VCO web interface to trusted networks, and examine logs for activity identified in…
Read the original report →Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-114625 | High | Score 63/100 | First seen |
| CVE | CVE-2026-93952 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-16812 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…