CVE-2026-86109

Name of the Vulnerable Software and Affected Versions VeloCloud Edge (affected versions not specified)

Description The software update workflow fails to properly validate signatures of update bundles because it does not restrict the digest algorithm used for artifact verification. A digest algorithm is a cryptographic hash function used to verify the integrity of a file. An attacker with sufficient privileges to upload packages to VeloCloud Orchestrator or credentials allowing direct access to an Edge device could install unauthorized software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.