DeutschShown in its original language — a full translation is planned for a future version.
Arista NG Firewall: Mehrere Schwachstellen ermöglichen Codeausführung und Cross-Site Scripting
view advisory published 2026-02-09
Ein entfernter Administrator kann mehrere Schwachstellen in Arista NG Firewall ausnutzen, um beliebigen Programmcode auszuführen und Cross-Site-Scripting-Angriffe durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-25624US | medium4.8 | — | ||
An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGF… | ||||
| CVE-2026-25623US | — | — | ||
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticat… | ||||
| CVE-2026-25622US | — | — | ||
A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an administ… | ||||
| CVE-2026-25621US | — | — | ||
A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uni… | ||||
| CVE-2026-25620US | — | — | ||
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW).… | ||||
| CVE-2025-6978US | — | — | ||
Diagnostics command injection vulnerability | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan