Velocloud Edge
Approved changes feed: RSS · Atom
cpe:2.3:a:arista_networks:velocloud_edge:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Arista Networks (a0182fe3-0447-5099-835f-342e87c54952) |
|---|---|
| Product | Velocloud Edge (f80b1d27-579f-55c3-aeb3-f8bee2480a5a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-86108 |
vulnerable | 2026-09-16 04:32:58.970797 |
Security Advisory 0181
HIGH (8)
Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated privileges on the affected VeloCloud Edge.
Published: 2026-09-16T02:50:07.219Z
Updated: 2026-09-17T17:41:11.191Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86109 |
vulnerable | 2026-09-16 04:32:58.783021 |
Security Advisory 0182
MEDIUM (6.6)
The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator or credentials permitting direct access to an Edge may be able to install unauthorized software.
Published: 2026-09-16T02:57:46.285Z
Updated: 2026-09-17T17:40:35.095Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.