CVE-2026-86107

Name of the Vulnerable Software and Affected Versions VeloCloud Edge (affected versions not specified) VeloCloud Gateway (affected versions not specified)

Description An out-of-bounds write occurs when processing tunneled IP fragments between authenticated overlay neighbors. This issue specifically impacts the VeloCloud VCMP tunnel protocol. A successful exploit can cause the affected process to terminate and restart, resulting in a temporary disruption of traffic. Unauthenticated hosts that cannot establish an overlay peer relationship are unable to trigger this logic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.