CVE-2026-86106

CVSS 9.6 (critical) · published 2026-09-16

An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.

Weakness: CWE-306

Source: NVD CVE-2026-86106

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.