CVE-2025-6978Patch

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Diagnostics command injection vulnerability

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://https://www.arista.com/en/support/advisories-notices/security-advisory/22535-security-advisory-0123

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-02-05); latest day: 2
4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d

Signal classification3 categories

Patch

250.0%

Disclosure

125.0%

General

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-05	2	Patch2
2026-02-06	2	Disclosure1General1

Full discourse4 posts

TrendAI Zero Day Initiative@thezdi245d
Patch
CVE-2025-6978: Arbitrary Code Execution in the #Arista NG Firewall - our researchers took a deep dive into this recently patched RCE to provide root cause and detection guidance. Read all the details at https://www.zerodayinitiative.com/blog/2026/2/4/cve-2025-6978-arbitrary-code-execution-in-the-arista-ng-firewall
Post summary
The blog post reports that CVE‑2025‑6978, an arbitrary code execution flaw in Arista NG Firewall, has been patched and offers root‑cause analysis and detection guidance.
015170287.9K
85.7K followersView on X
CVETrends@CVEShield245d
General
Top 5 Trending CVEs: 1 - CVE-2026-21509 2 - CVE-2025-55182 3 - CVE-2025-6978 4 - CVE-2025-8088 5 - CVE-2025-62203 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post enumerates five trending CVE identifiers without providing any additional technical, exploit, or mitigation details.
00020231
1.7K followersView on X
Autumn Good@autumn_good_35245d
Disclosure
『Successful exploitation could result in arbitrary command execution under the security context of the root user.』 CVE-2025-6978: Arbitrary Code Execution in the Arista NG Firewall https://www.zerodayinitiative.com/blog/2026/2/4/cve-2025-6978-arbitrary-code-execution-in-the-arista-ng-firewall
Post summary
The text announces CVE‑2025‑6978, noting that exploitation can lead to arbitrary command execution as root on Arista NG Firewall, and links to a blog post, but it does not mention a PoC, exploit tools, active exploitation, or a patch.
10000504
6.7K followersView on X
Israel@f1tym1245d
Patch
CVE-2025-6978: Arbitrary Code Execution in the Arista NG Firewall https://ift.tt/zJQyxwi In this excerpt of a TrendAI Research Services vulnerability report, Jonathan Lein and Simon Humbert of the TrendAI Research team detail a recently patched command injection vulnerability…
Post summary
The excerpt reports a recently patched command injection vulnerability (CVE-2025-6978) in Arista NG Firewall, detailing arbitrary code execution but offering no PoC or exploitation evidence.
0000067
924 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2025-6978

TrendAI Zero Day Initiative[verified]@thezdiPatch

The blog post reports that CVE‑2025‑6978, an arbitrary code execution flaw in Arista NG Firewall, has been patched and offers root‑cause analysis and detection guidance.

Israel[verified]@f1tym1Patch

The excerpt reports a recently patched command injection vulnerability (CVE-2025-6978) in Arista NG Firewall, detailing arbitrary code execution but offering no PoC or exploitation evidence.

CVETrends@CVEShieldGeneral

The post enumerates five trending CVE identifiers without providing any additional technical, exploit, or mitigation details.

Autumn Good@autumn_good_35Disclosure

The text announces CVE‑2025‑6978, noting that exploitation can lead to arbitrary command execution as root on Arista NG Firewall, and links to a blog post, but it does not mention a PoC, exploit tools, active exploitation, or a patch.