Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-25623

Arista Edge Threat Management NGFW UI Arbitrary Command Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)

Default version status: unaffected

  • 0 to ≤ 17.4.0affected

References