CVE-2026-25623
MediumCVSS 6.0Exploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW), allowing authenticated administrators to obtain underlying terminal script code processing execution permissions.
Risk Assessment
The risk involves the ability for an administrator to execute arbitrary scripts, potentially leading to privilege escalation or full system compromise.
Recommendation
Restrict administrative access and apply security patches from the vendor.
Original NVD description (English source)
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.