CVE-2026-86107
Medium
Description
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impacts the VeloCloud VCMP tunnel protocol only. A successful exploit can cause the affected process to terminate and restart, leading to a temporary disruption of traffic. Hosts on the internet that are unauthenticated and unable to form an overlay peer relationship can not trigger the vulnerable logic.
SeverityMedium
CVSS5.9
Exploit probability—
ProductVeloCloud
PublishedSep 16, 2026
First seenSep 16, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- Arista Networks VeloCloud5.2.0.0, 5.2.7.0, 6.1.5.0, 6.4.2.0 or later
- Arista Networks VeloCloud Gateway5.2.0.0, 5.2.7.0, 6.1.5.0, 6.4.2.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Arista Networks VeloCloud | 1.0.0.0 ≤ v < 5.2.0.0, 5.2.0.0 ≤ v < 5.2.7.0, 6.1.0.0 ≤ v < 6.1.5.0, 6.4.0.0 ≤ v < 6.4.2.0 | 5.2.0.0, 5.2.7.0, 6.1.5.0, 6.4.2.0 |
| Arista Networks VeloCloud Gateway | 1.0.0.0 ≤ v < 5.2.0.0, 5.2.0.0 ≤ v < 5.2.7.0, 6.1.0.0 ≤ v < 6.1.5.0, 6.4.0.0 ≤ v < 6.4.2.0 | 5.2.0.0, 5.2.7.0, 6.1.5.0, 6.4.2.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.