CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-10-22
VeloCloud Orchestrator (VCO) Privilege Escalation and Internal Access Vulnerability (CVE-2026-114625)
[Affected Scope] On-premise deployments of VeloCloud Orchestrator (VCO).
[Impact] Authenticated users can escalate to 'superuser operator' privileges, leading to full system compromise and data breach.
[Mitigation] Apply official security patches immediately and restrict network access to the management interface.