VulnSocial

CVE-2026-86109Patch

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator or credentials permitting direct access to an Edge may be able to install unauthorized software.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-347

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-16: 1Patch / Workaround · 2026-09-16: 1Technical Details · 2026-09-16: 109-16
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • Bussio28Team 🌐 Ciberseguridad C1b3rN3t_R00t@Bussio28Team
    Patch

    🚨 Nueva vulnerabilidad en VeloCloud Edge: CVE-2026-86109. 🔎 ¿Qué pasa? Un atacante con privilegios elevados podría instalar software no autorizado por un fallo en la verificación de firmas. 🛡️ ¿Qué haría yo? Actualizar cuanto antes y revisar quién tiene acceso administrativo. De momento no hay explotación conocida. #B28 #Ciberseguridad

    Post summary

    The text announces CVE-2026-86109 in VeloCloud Edge, describing a signature verification flaw, and emphasizes the need for immediate updates and access reviews, while noting no known exploitation.

    0001053
    519 followersView on X

Explore more

Back to dashboard