CVE Feed

    Dashboard / CVE / CVE-2026-86108

    CVE-2026-86108

    Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated privileges on the affected VeloCloud Edge.

    Published:Sep 16, 2026
    Last Modified:Sep 29, 2026
    EPS:Sep 16, 2026
    EPSS Score:0.00608
    CVSS Score:8

    Affected Products

    Vendor
    Arista
    Product
    Velocloud Edge

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High