Threats Tagged 'cve-2026-86108'

CVE-2026-86108 is a high-severity vulnerability in VeloCloud Edge devices caused by insufficient validation of inputs in management and configuration workflows. This flaw allows an authorized management request or configuration value to be interpreted as an operating system command, potentially enabling command execution with elevated privileges. The vulnerability affects VeloCloud Edge devices but no specific affected versions are provided. There is no information on available patches or vendor advisories. Exploitation requires high privileges and no user interaction. No known exploits are reported in the wild.

CVE-2026-86108 is an OS command injection vulnerability in Arista Networks VeloCloud Edge. It arises from insufficient input validation in management and configuration workflows, allowing authorized management requests or configuration values to be interpreted as OS commands. Exploitation can lead to command execution with elevated privileges on the affected device. The vulnerability affects multiple versions of VeloCloud Edge, ranging from initial releases up to certain patch levels. The CVSS v3.1 score is 8.0, indicating high severity.