CVE-2026-86106 — CRITICAL (9.6)

Vulnerability Description

An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.

CVSS Score

9.6

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Related Weaknesses (CWE)

CWE-306

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24735-sec

FAQ

What is CVE-2026-86106?

CVE-2026-86106 is a vulnerability with a CVSS score of 9.6 (CRITICAL). An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units ...

How severe is CVE-2026-86106?

CVE-2026-86106 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-86106?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.