CISA Adds One Known Exploited Vulnerability to Catalog
Summary
CISA has added a new SQL injection vulnerability in Arista VeloCloud Orchestrator (CVE-2026-114625) to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. This addition aligns with Binding Operational Directive (BOD) 26-04, which mandates federal agencies to prioritize the remediation of high-risk vulnerabilities listed in the KEV Catalog.
IFF Assessment
The article details a newly identified actively exploited vulnerability, which represents a direct threat and bad news for defenders.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: October 26, 2026. Known ransomware use: Unknown.
Defender Context
This update highlights the importance of actively monitoring CISA's KEV Catalog for actively exploited vulnerabilities. Defenders should prioritize patching CVE-2026-114625 in Arista VeloCloud Orchestrator and ensure their vulnerability management programs align with CISA's directive for risk-based prioritization.