Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🟠 Arista Edge Threat Management (NGFW), #OS Command Injection, #CVE-2026-25620 (MEDIUM) -DC-Jun2026-293 https://dailycve.com/arista-edge-threat-management-ngfw-os-command-injection-cve-2026-25620-medium-dc-jun2026-293/
Post summary
The post discloses CVE-2026-25620, an OS command injection vulnerability in Arista Edge Threat Management (NGFW) with medium severity, but provides no PoC, exploit, or patch details.
CVE-2026-25620 An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Fir… https://www.cve.org/CVERecord?id=CVE-2026-25620
Post summary
The text confirms the existence of CVE‑2026‑25620 as an encrypted password command injection flaw in Arista's Captive Portal framework, but provides no proof of concept, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | arista | ng_firewall | 17.4 | - | - |