Description
An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | VeloCloud Edge | 1.0.0.0 – < 5.2.0.0, 5.2.0.0 – < 5.2.7.0, 6.1.0.0 – < 6.1.5.0, 6.4.0.0 – < 6.4.2.0 | 5.2.0.0 |
Advisories 2
- NCSC-2026-0404 Kwetsbaarheden verholpen in WatchGuard Fireware OS NCSC-NL (Netherlands) · Oct 7, 2026
- WID-SEC-2026-3287 Arista EOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 16, 2026