Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Flags	Published
	Critical	9.4	CVE-2026-114625	VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host Arista, Arista NetworksArista VeloCloud Orchestrator, Arista Networks VeloCloud Orchestrator, Arista VeloCloud Orchestrator (VCO), Arista VeloCloud Orchestrator On-Prem	NVD	KEV	Oct 22 21:17 UTC
CVE-2026-114625VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host Executive summary Arista's VeloCloud Orchestrator (VCO) on-prem software has a flaw that lets any authenticated user gain operator-level privileges and reach internal-only functions. The advisory rates it critical (CVSS v3.1 base score 9.9) and says it is known to be actively exploited. The vendor recommends upgrading to a fixed VCO release as soon as possible. Technical summary The advisory classifies the issue as CWE-89 SQL Injection, and says a remote attacker with a valid authenticated session can become a local "superuser operator" and reach internal-only functionality. Exploitation requires network access to the VCO web interface and a session for at least the Enterprise Read Only role, and the advisory states VCO is exposed by default with no configuration that prevents exposure. Affected versions are VCO 5.2.x prior to 5.2.3.18, 6.1.x prior to 6.1.3.10, and 6.4.x prior to 6.4.2.12, with fixed releases 5.2.3.18, 6.1.3.10, and 6.4.2.12 and later. End-of-support versions have not been assessed. The advisory lists indicators of compromise, including two IP addresses (74.82.197.86 and 38.54.50.151) and suspicious web access log patterns, and recommends blocking those IPs and reviewing logs. No workaround that removes the exposure is stated; the advisory recommends restricting web interface access, monitoring for webshells and backdoor daemons, and reviewing administrator activity until patching. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from arista.com/en/support/advisories-notice…curity-advisory-0199 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Arista Arista Networks Arista VeloCloud Orchestrator Arista Networks VeloCloud Orchestrator Arista VeloCloud Orchestrator (VCO)Arista VeloCloud Orchestrator On-Prem NIST National Vulnerability DatabasePublished Oct 22, 2026 21:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee