CVE-2026-86106

This Arista VeloCloud Edge vulnerability (CWE-306, Missing Authentication for Critical Function) allows an unauthenticated attacker with Layer 2 access to the private HA interconnect to trigger sensitive HA peer functions without verification, potentially resulting in elevated command execution o...

Security Advisory 0179

Security Advisory 0179 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-86106 CVSSv3.1 Base Score: 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 8.7...