cve | cybersecurity | Threat Intelligence | zero day VeloCloud CVE-2026-114625: A Read-Only Login Becomes Superuser By Arista VeloCloud Orchestrator has its third exploited zero-day since July. CVE-2026-114625 lets the lowest-privilege login become superuser. CISA wants it fixed by Monday, and September’s patch is not enough.