NCSC-2026-0459 [1.00] [M/H] Kwetsbaarheid verholpen in Arista VeloCloud Orchestrator (VCO) on-premises

Arista heeft een kritieke kwetsbaarheid verholpen in VeloCloud Orchestrator (VCO) On-Prem. De kwetsbaarheid met kenmerk CVE-2026-114625 heeft een CVSS-score van 9.9 en betreft SQL-injectie. Een geauthenticeerde kwaadwillende kan de kwetsbaarheid op afstand misbruiken om verhoogde rechten te verkrijgen en zich voor te doen als een lokale 'superuser operator'. Hierdoor kan de kwaadwillende toegang krijgen tot interne b…

Vulnerabilities & Zero-Day Databases
Read the full article at NCSC Netherlands Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Wordfence Blog

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 19, 2026 to October 25, 2026)

Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to ...Read More The post Wordfence Intelligence Week…

Censys Research

Censys takes census of the Internet like no one else

Key Takeaways: A messy week for PHP: how PHP2Shell was disclosed On October 20, PHP announced an emergency release for two pre-auth remote code execution (RCE) flaws in the PHP core, CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2. These two vulnerabilities together came to be known as “PHP2Shell.” That evening, Calif, one of the research […] The post Censys takes census of the Internet like no one else appe…