Skip to content
OpenAdvisories
Medium · 6.0 CVE-2026-25623 EUVD-2026-34909GHSA-q9j2-m53h-872m

Arista Edge Threat Management NGFW UI Arbitrary Command Execution

Published Jun 5, 2026 · Updated Jun 5, 2026 · Assigned by Arista

Description

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.

Affected products

VendorProductAffectedFixed
Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) ≤ 17.4.0 —

Advisories 1

References