Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Arista Networks VeloCloud Edge 5.2.0 Clear all filters
TI-2026-58909 CVE-2026-86109 · GHSA-gqff-2qm6-5664

Improper signature verification in Arista VeloCloud Edge

Priority LOW 34

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00243 Published 2026-09-16 No fix listed CWE-347
TI-2026-58908 CVE-2026-86108 · GHSA-x5pp-fh4g-xqcc

OS command injection in Arista VeloCloud Edge

Priority LOW 36

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system…

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00608 Published 2026-09-16 No fix listed CWE-78