Unauthorized Access Vulnerability in Arista Edge Units with HA Enabled
CVE-2026-86106

8.7HIGH

Key Information:

Vendor

Arista Networks

Status
Velocloud Edge
Vendor
CVE Published:
16 September 2026

What is CVE-2026-86106?

An unauthenticated attacker with network access may exploit the private high availability (HA) interconnect to trigger sensitive peer functions without necessary verification. This vulnerability can lead to elevated command execution on Arista Edge units where HA is enabled, posing serious security risks to network operations.

Affected Version(s)

VeloCloud Edge VeloCloud Edge 1.0.0.0 < 5.2.0.0

VeloCloud Edge VeloCloud Edge 5.2.0.0 < 5.2.7.0

VeloCloud Edge VeloCloud Edge 6.1.0.0 < 6.1.5.0

References

https://www.arista.com/en/support/advisories-notices/secu...
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.