CVE-2026-25623: Arista NG Firewall

Medium severity, CVSS 6.0. EPSS: 0.6% chance of exploitation in the next 30 days.

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.

Affected products

• Arista NG Firewall: before 17.4.1 (fixed in 17.4.1)

Published 2026-06-05. Last modified 2026-07-23.