CVE-2026-86107 | Arista VeloCloud/VeloCloud Gateway prior 5.2.0.0/5.2.7.0/6.1.5.0/6.4.2.0 VCMP Tunnel Protocol out-of-bounds write (WID-SEC-2026-3287)

A vulnerability was found in Arista VeloCloud and VeloCloud Gateway. It has been declared as critical. The affected element is an unknown function of the component VCMP Tunnel Protocol. The manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2026-86107. The attack can be launched remotely. No exploit exists. It is...