CVE-2026-114625: A Read-Only Login Is Enough to Own Arista VeloCloud Orchestrator

CVE-2026-114625 in Arista VeloCloud Orchestrator lets any authenticated user, including a read-only tenant account, escalate to superuser operator. CVSS 9.9, actively exploited.