CVE-2026-25623: Arista Edge Threat Management NGFW UI Arbitrary Command Execution
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Arista Edge Threat Management NGFWto a version that resolves this vulnerability.Fixed in 17.4.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25623?
CVE-2026-25623 has a severity rating of medium with a score of 6.
How do I fix CVE-2026-25623?
To resolve CVE-2026-25623, upgrade to NGFW Version 17.4.1.
What type of vulnerability is CVE-2026-25623?
CVE-2026-25623 is an input validation command execution vulnerability.
Who is affected by CVE-2026-25623?
CVE-2026-25623 affects authenticated administrators using Arista Edge Threat Management NGFW.
What could an attacker achieve by exploiting CVE-2026-25623?
Exploitation of CVE-2026-25623 could allow an attacker to execute terminal script code with elevated permissions.