Skip to content
Standard Reader
Log in
Tag

Sd-wan

Articles and publications tagged Sd-wan across the Atmosphere.

7articles6publications
andreagomez205
andreagomez205Oct 23, 2026
Why the VeloCloud Orchestrator stays reachable, and what that means for CVE-2026-114625
Technical analysis of CVE-2026-114625 in Arista VeloCloud Orchestrator.
vulnerabilitysd-wan
sorrelthorncroft
sorrelthorncroftOct 23, 2026
Hunting VeloCloud Orchestrator exploitation: what CVE-2026-114625 leaves in the logs
Technical analysis of CVE-2026-114625 in Arista VeloCloud Orchestrator.
vulnerabilitysd-wan
eiuspkz
eiuspkzOct 23, 2026
CVE-2026-114625: A Read-Only Login Is Enough to Own Arista VeloCloud Orchestrator
CVE-2026-114625 in Arista VeloCloud Orchestrator lets any authenticated user, including a read-only tenant account, escalate to superuser operator. CVSS 9.9, actively exploited.
vulnerabilitysd-wan
andreagomez205
andreagomez205Oct 23, 2026
Hunting CVE-2026-114625: What to Look for After the VeloCloud Orchestrator Patch
How to hunt for exploitation of CVE-2026-114625 in VeloCloud Orchestrator: log fields, attributed attacker IPs, evidence preservation order, and why the patch alone is not enough.
detectionincident-response
facilishz
facilishzOct 23, 2026
VeloCloud Orchestrator Patch Triage: Three Release Trains, One Critical SQL Injection
Patch triage for CVE-2026-114625 across VeloCloud Orchestrator 5.2, 6.1 and 6.4 trains, including the stale-patch trap from earlier 2026 VCO fixes.
patch-managementvulnerability-management
ioneyrezende
ioneyrezendeOct 22, 2026
Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern
CVE-2026-114625 is the third exploited VeloCloud Orchestrator flaw in 2026. What changed with the authentication requirement, and what the pattern says about patch assurance.
trend-analysissd-wan
jeffreyciend
jeffreyciendOct 22, 2026
Why an SD-WAN Orchestrator Is a Crown-Jewel Target: Lessons from CVE-2026-114625
An SD-WAN orchestrator is a control plane, not a workload. CVE-2026-114625 shows how a read-only tenant login becomes platform-level control and why partner accounts are tier-zero.
threat-modelsd-wan

You've reached the end.