CVE-2026-86108 — Security Advisory 0181

CVE-2026-86108

Security Advisory 0181 PUBLISHED

Description (CNA)

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated privileges on the affected VeloCloud Edge.

Affected (CNA)

Vendor / product	Versions
Arista Networks / VeloCloud Edge	affected 6.4.0 through 6.4.1.x; affected 6.1.0 through 6.1.4.x; affected 5.2.0 through 5.2.6.x; affected 0.0.0 before 5.2.0

CWE

CWE-78

References

https://www.arista.com/zh/support/advisories-notices/security-advisory/24737-security-advisory-0181

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.