Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-25620

Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.

CVSS 4.0 · 7 High EPSS 9.3% KEV · Not listed
Vendors
Arista
Products
Edge Threat Management Ng Firewall
CVE-2026-25621

Arista Edge Threat Management NGFW Reports Application Insecure Input Validation

A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Arista
Products
Edge Threat Management Ng Firewall
CVE-2026-25622

Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection

A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an administrative account logged into the user interface can exploit this input handling behavior to execute arbitrary platform shell commands.

CVSS 4.0 · 7 High EPSS 9.3% KEV · Not listed
Vendors
Arista
Products
Edge Threat Management Ng Firewall
CVE-2026-25623

Arista Edge Threat Management NGFW UI Arbitrary Command Execution

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.

CVSS 4.0 · 7 High EPSS 5.6% KEV · Not listed
Vendors
Arista
Products
Edge Threat Management Ng Firewall
CVE-2026-25624

Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting

An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Arista
Products
Edge Threat Management Ng Firewall