CVE-2026-86107: Security Advisory 0180
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impacts the VeloCloud VCMP tunnel protocol only.
A successful exploit can cause the affected process to terminate and restart, leading to a temporary disruption of traffic. Hosts on the internet that are unauthenticated and unable to form an overlay peer relationship can not trigger the vulnerable logic.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
VeloCloud Edge and Gateway (VCMP tunnel protocol)to a version that resolves this vulnerability.Fixed in 5.2.7.0 - Upgrade
Upgrade
VeloCloud Edge and Gateway (VCMP tunnel protocol)to a version that resolves this vulnerability.Fixed in 6.1.5.0 - Upgrade
Upgrade
VeloCloud Edge and Gateway (VCMP tunnel protocol)to a version that resolves this vulnerability.Fixed in 6.4.2.0 - Upgrade
Upgrade
VeloCloud Edge and Gateway (VCMP tunnel protocol)to a version that resolves this vulnerability.Fixed in 7.0.0 - Compensating control
Note that the vulnerability only affects the VeloCloud VCMP tunnel protocol when processing tunneled IP fragments between authenticated overlay neighbors; internet hosts that are unauthenticated and unable to form an overlay peer relationship cannot trigger the vulnerable logic.
- Operational
Plan for a potential temporary traffic disruption: a successful exploit may cause the affected process to terminate and restart.
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must be an authenticated VeloCloud overlay neighbor capable of sending tunneled IP fragments over the VCMP tunnel protocol. Unauthenticated internet hosts that cannot establish an overlay peer relationship cannot reach the vulnerable logic.
What is the expected impact of successful exploitation?
Successful exploitation can terminate and restart the affected process, causing a temporary traffic disruption. The provided information does not describe confidentiality or integrity impact.
Are systems affected outside of VCMP tunnels?
No. The vulnerability affects VeloCloud Edge and Gateway processing of tunneled IP fragments in the VCMP tunnel protocol only.