https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-114625/https://vulnfeed.org/cve/CVE-2026-114625/Fri, 23 Oct 2026 00:00:00 +0000Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.https://vulnfeed.org/cve/CVE-2026-93952/https://vulnfeed.org/cve/CVE-2026-93952/Tue, 22 Sep 2026 07:37:24 +0000Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.https://vulnfeed.org/cve/CVE-2026-16812/https://vulnfeed.org/cve/CVE-2026-16812/Mon, 27 Jul 2026 16:11:00 +0000Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.