Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

Arista Networks released security updates to patch a critical vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. The vulnerability, CVE-2026-114625, has been actively exploited in attacks.