CVE-2026-25620highCWE-78

CVE-2026-25620: high-severity vulnerability in Arista Edge Threat Management - Arista Next…

Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection

Published

Follow this CVE+ Monitor Arista Edge Threat Management - Arista Next Generation Firewall

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7epss 9.3%
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/S:P
Affected products
Arista Networks · Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)
Related CVEs — Arista Edge Threat Management - Arista Next…

In the same product, most dangerous first.

CVE-2026-25622HIGHArista Edge Threat Management NGFW Captive Portal Custom Handler Command InjectionEPSS 9.3%CVE-2026-25623HIGHArista Edge Threat Management NGFW UI Arbitrary Command ExecutionEPSS 5.6%CVE-2026-25621HIGHArista Edge Threat Management NGFW Reports Application Insecure Input ValidationEPSS 0.2%CVE-2026-25624MEDIUMArista Edge Threat Management NGFW UI Administrative Cross-Site ScriptingEPSS 0.2%