CVE-2026-86106

CRITICALCVSS 9.6

Description

An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.

Timeline

Published:September 16th, 2026 11:16 AM

Last modified:September 16th, 2026 8:36 PM

CVSS Scoring

CVSS v3: 9.6 (CRITICAL)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306

References & Reports

Advisories, patches, and third-party reports

https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179

Source: NIST NVD · Data may lag official sources by up to one minute