CVE-2026-86106

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-86106", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-09-05T01:54:43.258Z", "datePublished": "2026-09-16T10:12:55.587Z", "dateUpdated": "2026-09-16T17:53:47.977Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-09-16T10:25:43.381Z"}, "title": "Security Advisory 0179", "descriptions": [{"lang": "en", "value": "An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "VeloCloud Edge", "defaultStatus": "unaffected", "versions": [{"version": "1.0.0.0", "lessThan": "5.2.0.0", "status": "affected", "versionType": "custom"}, {"version": "5.2.0.0", "lessThan": "5.2.7.0", "status": "affected", "versionType": "custom"}, {"version": "6.1.0.0", "lessThan": "6.1.5.0", "status": "affected", "versionType": "custom"}, {"version": "6.4.0.0", "lessThan": "6.4.2.0", "status": "affected", "versionType": "custom"}], "platforms": ["VeloCloud Edge"]}], "configurations": [{"lang": "en", "value": "The vulnerability requires HA to be enabled and the attacker to have Layer 2 network access to the dedicated HA interconnect.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The vulnerability requires HA to be enabled and the attacker to have Layer 2 network access to the dedicated HA interconnect.</p>"}]}], "workarounds": [{"lang": "en", "value": "Use dedicated port-to-port connections between HA pairs. Avoid extending the HA interconnect through shared switches or VLANs. Restrict physical and network access to HA interfaces.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Use dedicated port-to-port connections between HA pairs. Avoid extending the HA interconnect through shared switches or VLANs. Restrict physical and network access to HA interfaces.</p>"}]}], "solutions": [{"lang": "en", "value": "The following VeloCloud Edge releases contain the fix:\n- 5.2.7.0 and later in the 5.2.x train\n- 6.1.5.0 and later in the 6.1.x train\n- 6.4.2 and later in the 6.4.x train\n- 7.0.0 and later\n\nNo hotfixes are available for this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The following VeloCloud Edge releases contain the fix:</p>\n<ul>\n<li>5.2.7.0 and later in the 5.2.x train</li>\n<li>6.1.5.0 and later in the 6.1.x train</li>\n<li>6.4.2 and later in the 6.4.x train</li>\n<li>7.0.0 and later</li>\n</ul>\n<p>No hotfixes are available for this issue.</p>"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.6, "baseSeverity": "CRITICAL"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.7, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179", "tags": ["vendor-advisory"]}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "source": {"advisory": "Security Advisory 0179", "discovery": "INTERNAL", "defects": ["BUG1833882"]}, "datePublic": "2026-09-09T00:00:00.000Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-16T17:52:49.256029Z", "id": "CVE-2026-86106", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-16T17:53:47.977Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-86106", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-09-16T17:52:49.256029Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-16T17:53:43.230Z"}}], "cna": {"title": "Security Advisory 0179", "source": {"defects": ["BUG1833882"], "advisory": "Security Advisory 0179", "discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 9.6, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Arista Networks", "product": "VeloCloud Edge", "versions": [{"status": "affected", "version": "1.0.0.0", "lessThan": "5.2.0.0", "versionType": "custom"}, {"status": "affected", "version": "5.2.0.0", "lessThan": "5.2.7.0", "versionType": "custom"}, {"status": "affected", "version": "6.1.0.0", "lessThan": "6.1.5.0", "versionType": "custom"}, {"status": "affected", "version": "6.4.0.0", "lessThan": "6.4.2.0", "versionType": "custom"}], "platforms": ["VeloCloud Edge"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "The following VeloCloud Edge releases contain the fix:\n- 5.2.7.0 and later in the 5.2.x train\n- 6.1.5.0 and later in the 6.1.x train\n- 6.4.2 and later in the 6.4.x train\n- 7.0.0 and later\n\nNo hotfixes are available for this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>The following VeloCloud Edge releases contain the fix:</p>\n<ul>\n<li>5.2.7.0 and later in the 5.2.x train</li>\n<li>6.1.5.0 and later in the 6.1.x train</li>\n<li>6.4.2 and later in the 6.4.x train</li>\n<li>7.0.0 and later</li>\n</ul>\n<p>No hotfixes are available for this issue.</p>", "base64": false}]}], "datePublic": "2026-09-09T00:00:00.000Z", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "Use dedicated port-to-port connections between HA pairs. Avoid extending the HA interconnect through shared switches or VLANs. Restrict physical and network access to HA interfaces.", "supportingMedia": [{"type": "text/html", "value": "<p>Use dedicated port-to-port connections between HA pairs. Avoid extending the HA interconnect through shared switches or VLANs. Restrict physical and network access to HA interfaces.</p>", "base64": false}]}], "descriptions": [{"lang": "en", "value": "An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.", "supportingMedia": [{"type": "text/html", "value": "<p>An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "configurations": [{"lang": "en", "value": "The vulnerability requires HA to be enabled and the attacker to have Layer 2 network access to the dedicated HA interconnect.", "supportingMedia": [{"type": "text/html", "value": "<p>The vulnerability requires HA to be enabled and the attacker to have Layer 2 network access to the dedicated HA interconnect.</p>", "base64": false}]}], "providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-09-16T10:25:43.381Z"}}}, "cveMetadata": {"cveId": "CVE-2026-86106", "state": "PUBLISHED", "dateUpdated": "2026-09-16T17:53:47.977Z", "dateReserved": "2026-09-05T01:54:43.258Z", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "datePublished": "2026-09-16T10:12:55.587Z", "assignerShortName": "Arista"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["VeloCloud Edge"], "product": "VeloCloud Edge", "vendor": "Arista Networks", "versions": [{"lessThan": "5.2.0.0", "status": "affected", "version": "1.0.0.0", "versionType": "custom"}, {"lessThan": "5.2.7.0", "status": "affected", "version": "5.2.0.0", "versionType": "custom"}, {"lessThan": "6.1.5.0", "status": "affected", "version": "6.1.0.0", "versionType": "custom"}, {"lessThan": "6.4.2.0", "status": "affected", "version": "6.4.0.0", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled."}], "id": "CVE-2026-86106", "lastModified": "2026-09-16T20:36:52.890", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 6.0, "source": "psirt@arista.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-86106", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-09-16T17:52:49.256029Z", "version": "2.0.3"}}]}, "published": "2026-09-16T11:16:43.783", "references": [{"source": "psirt@arista.com", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["velocloud_edge"], "status": "affected", "versions": {"scheme": "generic", "value": "[1.0.0.0,5.2.0.0)"}}, {"platform": ["velocloud_edge"], "status": "affected", "versions": {"scheme": "generic", "value": "[5.2.0.0,5.2.7.0)"}}, {"platform": ["velocloud_edge"], "status": "affected", "versions": {"scheme": "generic", "value": "[6.1.0.0,6.1.5.0)"}}, {"platform": ["velocloud_edge"], "status": "affected", "versions": {"scheme": "generic", "value": "[6.4.0.0,6.4.2.0)"}}], "enrichment": {"confidence": 82.0, "confidence_source": "matching", "scores": [{"score": 82.0, "source": "matching"}]}, "original": {"product": "VeloCloud Edge", "source": "cna", "vendor": "Arista Networks"}, "product": "velocloud_edge", "vendor": "arista"}], "created": "2026-09-17T20:45:16.054752+00:00", "title": "Unauthenticated HA Interconnect Vulnerability Allows Remote Command Execution on VeloCloud Edge", "updated": "2026-09-18T11:00:09.360018+00:00", "vendors": ["arista", "arista$PRODUCT$velocloud_edge"]}