VeloCloud Edge vulnerabilities

2 known vulnerabilities in VeloCloud Edge from Arista Networks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  VeloCloud Edge: Missing Authentication for Critical Functionality

  CVE-2026-86106Sep 16, 2026Arista Networks

  An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.

• 8.0 High severity

  VeloCloud Edge: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-86108Sep 16, 2026Arista Networks

  Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may al