CVE-2026-86108 Security Advisory 0181

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated...

CVE-2026-86108

CVE-2026-86108 is an OS command injection (CWE-78) in Arista VeloCloud Edge (formerly VeloCloud Edge by Broadcom), caused by insufficient validation of inputs in management and configuration workflows. An authorized attacker with a compromised VeloCloud Orchestrator or valid management credential...

EUVD-2026-80092

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated...