Arista Networks security advisory (AV26-1080) – Update 1

Serial number: AV26-1080Date: October 23, 2026 As of October 22, 2026, Arista Networks is affected by a vulnerability in the following product: VeloCloud Orchestrator (VCO) Prior to 5.2.3.18 Prior to 6.1.3.10 Prior to 6.4.2.12 Arista Networks indicates that CVE-2026-114625 is exploited in the wild. Update 1 On October 23, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-114625 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Advisory 0199 Arista Networks Advisories & Notices CISA KEV: CVE-2026-114625