CVE-2026-25621highCWE-78

CVE-2026-25621: high-severity vulnerability in Arista Edge Threat Management - Arista Next…

Arista Edge Threat Management NGFW Reports Application Insecure Input Validation

Published

Follow this CVE+ Monitor Arista Edge Threat Management - Arista Next Generation Firewall

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7epss 0.2%
A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/S:P
Affected products
Arista Networks · Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)
Related CVEs — Arista Edge Threat Management - Arista Next…

In the same product, most dangerous first.

CVE-2026-25622HIGHArista Edge Threat Management NGFW Captive Portal Custom Handler Command InjectionEPSS 9.3%CVE-2026-25620HIGHArista Edge Threat Management NGFW Captive Portal Encrypted Password Command InjectionEPSS 9.3%CVE-2026-25623HIGHArista Edge Threat Management NGFW UI Arbitrary Command ExecutionEPSS 5.6%CVE-2026-25624MEDIUMArista Edge Threat Management NGFW UI Administrative Cross-Site ScriptingEPSS 0.2%