Command Execution Vulnerability in VeloCloud Edge by Arista Networks
CVE-2026-86108

7.5HIGH

Key Information:

Vendor

Arista Networks

Status
Velocloud Edge
Vendor
CVE Published:
16 September 2026

What is CVE-2026-86108?

A vulnerability exists in the VeloCloud Edge due to insufficient validation of inputs within its management and configuration workflows. This flaw could allow an authorized user to execute operating system commands by manipulating management requests or configuration values. If exploited, it may grant elevated privileges, thereby compromising the integrity and security of the VeloCloud Edge deployment.

Affected Version(s)

VeloCloud Edge 6.4.0 <= 6.4.1.x

VeloCloud Edge 6.1.0 <= 6.1.4.x

VeloCloud Edge 5.2.0 <= 5.2.6.x

References

https://www.arista.com/zh/support/advisories-notices/secu...
vendor-advisory

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered internally by Arista, and the company is not aware of any malicious exploitation of this vulnerability in customer networks.
.