CVE-2026-86108

Description

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated privileges on the affected VeloCloud Edge.

CVSS Vector

References

• https://www.arista.com/zh/support/advisories-notices/security-advisory/24737-security-advisory-0181