CVE-2026-86108

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command. Successful exploitation may allow command execution with elevated privileges on the affected VeloCloud Edge.

An attacker with management privileges can execute arbitrary operating system commands with elevated privileges on the VeloCloud Edge device. This leads to full compromise of the edge device and potentially the entire network.

Apply the vendor's available patches for VeloCloud Edge addressing input validation. Restrict access to management interfaces to trusted networks and accounts.