CVE-2026-25624

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-25624", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-02-03T22:23:04.359Z", "datePublished": "2026-06-05T19:34:37.618Z", "dateUpdated": "2026-06-05T20:28:03.806Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-06-05T19:34:37.618Z"}, "title": "Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting", "datePublic": "2026-02-03T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-79", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-Site Scripting')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-63", "descriptions": [{"lang": "en", "value": "CAPEC-63 Cross-Site Scripting (XSS)"}]}], "affected": [{"vendor": "Arista Networks", "product": "Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)", "platforms": ["Arista Edge Threat Management - Arista Next Generation Firewall (Formerly Untangle)"], "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "17.4.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.</p>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/23399-security-advisory-0133", "tags": ["vendor-advisory"]}], "configurations": [{"lang": "en", "value": "A successful attack requires administrative privileges to target UI entry forms and relies on session interaction parsing from a secondary administrator browser window.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A successful attack requires administrative privileges to target UI entry forms and relies on session interaction parsing from a secondary administrator browser window.</p>"}]}], "workarounds": [{"lang": "en", "value": "Per operational best practice security models, do not allow unauthorized administrative access to the administrative browser.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Per operational best practice security models, do not allow unauthorized administrative access to the administrative browser.</p>"}]}], "solutions": [{"lang": "en", "value": "The recommended resolution is to upgrade to NGFW Version 17.4.1 at your earliest convenience.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The recommended resolution is to upgrade to NGFW Version 17.4.1 at your earliest convenience.</p>"}]}], "credits": [{"lang": "en", "value": "Jon Williams & Ronan Kervella from Bishop Fox", "type": "finder"}], "source": {"defect": ["NGFW-15492"], "advisory": "0133", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}, "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "LOW", "baseSeverity": "MEDIUM", "baseScore": 5.7, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "HIGH", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "LOW", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.8, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-05T20:27:35.700216Z", "id": "CVE-2026-25624", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-05T20:28:03.806Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-25624", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-05T20:27:35.700216Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-05T20:27:59.744Z"}}], "cna": {"title": "Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting", "source": {"defect": ["NGFW-15492"], "advisory": "0133", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Jon Williams & Ronan Kervella from Bishop Fox"}], "impacts": [{"capecId": "CAPEC-63", "descriptions": [{"lang": "en", "value": "CAPEC-63 Cross-Site Scripting (XSS)"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.8, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "HIGH", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Arista Networks", "product": "Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "17.4.0"}], "platforms": ["Arista Edge Threat Management - Arista Next Generation Firewall (Formerly Untangle)"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "The recommended resolution is to upgrade to NGFW Version 17.4.1 at your earliest convenience.", "supportingMedia": [{"type": "text/html", "value": "<p>The recommended resolution is to upgrade to NGFW Version 17.4.1 at your earliest convenience.</p>", "base64": false}]}], "datePublic": "2026-02-03T00:00:00.000Z", "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/23399-security-advisory-0133", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "Per operational best practice security models, do not allow unauthorized administrative access to the administrative browser.", "supportingMedia": [{"type": "text/html", "value": "<p>Per operational best practice security models, do not allow unauthorized administrative access to the administrative browser.</p>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.", "supportingMedia": [{"type": "text/html", "value": "<p>An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-Site Scripting')"}]}], "configurations": [{"lang": "en", "value": "A successful attack requires administrative privileges to target UI entry forms and relies on session interaction parsing from a secondary administrator browser window.", "supportingMedia": [{"type": "text/html", "value": "<p>A successful attack requires administrative privileges to target UI entry forms and relies on session interaction parsing from a secondary administrator browser window.</p>", "base64": false}]}], "providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-06-05T19:34:37.618Z"}}}, "cveMetadata": {"cveId": "CVE-2026-25624", "state": "PUBLISHED", "dateUpdated": "2026-06-05T20:28:03.806Z", "dateReserved": "2026-02-03T22:23:04.359Z", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "datePublished": "2026-06-05T19:34:37.618Z", "assignerShortName": "Arista"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Arista Edge Threat Management - Arista Next Generation Firewall (Formerly Untangle)"], "product": "Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "17.4.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:arista:ng_firewall:*:*:*:*:*:*:*:*", "matchCriteriaId": "F65E3E58-ADC6-4BDA-9F4A-FABFDB26B59B", "versionEndExcluding": "17.4.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls."}, {"lang": "es", "value": "Una vulnerabilidad administrativa de cross-site scripting (XSS) existe en el dise\u00f1o del panel de control de la interfaz de usuario web de Arista Edge Threat Management - Arista Cortafuegos de Pr\u00f3xima Generaci\u00f3n (NGFW). Variables proporcionadas por el usuario no validadas se reflejan en los perfiles administrativos, facilitando los controles de comportamiento de procesamiento de carga \u00fatil de vector."}], "id": "CVE-2026-25624", "lastModified": "2026-07-23T07:10:00.113", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 4.7, "source": "psirt@arista.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25624", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-05T20:27:35.700216Z", "version": "2.0.3"}}]}, "published": "2026-06-05T20:17:31.160", "references": [{"source": "psirt@arista.com", "tags": ["Vendor Advisory"], "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/23399-security-advisory-0133"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["arista_edge_threat_management_-_arista_next_generation_firewall_(formerly_untangle)"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,17.4.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)", "source": "cna", "vendor": "Arista Networks"}, "product": "edge_threat_management", "vendor": "arista"}], "created": "2026-06-05T21:45:05.540148+00:00", "updated": "2026-06-07T11:15:49.976921+00:00", "vendors": ["arista", "arista$PRODUCT$edge_threat_management"]}