CVE-2026-86106: high-severity vulnerability in Arista Networks VeloCloud Edge
Security Advisory 0179
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 0.4%
An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Arista Networks · VeloCloud EdgeRelated CVEs — Arista Networks VeloCloud Edge
In the same product, most dangerous first.