CVE-2026-25620
MediumCVSS 6.0Exploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) version 17.4.0, allowing execution of arbitrary shell commands.
Risk Assessment
The risk involves the ability for an attacker to execute arbitrary commands, potentially leading to full compromise of the firewall system.
Recommendation
Immediately update to version 17.4.1 or later that fixes this vulnerability.
Other vulnerabilities in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)
See all- CVE-2026-25623Medium
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW), allowing authenticated administrators to obtain underlying terminal script code processing execution permissions.
- CVE-2026-25622Medium
A command injection vulnerability exists in the Captive Portal Custom Handler of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW), allowing an authenticated administrator to execute arbitrary platform shell commands.
Original NVD description (English source)
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS