Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-06 | 2 | Disclosure1General1 |
| 2026-06-08 | 1 | General1 |
🟠 Arista (Edge Threat Management NGFW), #OS Command Injection, #CVE-2026-25623 (MEDIUM) -DC-Jun2026-292 https://dailycve.com/arista-edge-threat-management-ngfw-os-command-injection-cve-2026-25623-medium-dc-jun2026-292/
Post summary
A brief notice of Arista Edge Threat Management NGFW OS Command Injection vulnerability (CVE‑2026‑25623) with minimal technical detail, no exploit or remediation information provided.
CVE-2026-25623 An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW… https://www.cve.org/CVERecord?id=CVE-2026-25623
Post summary
The text discloses a command execution vulnerability (CVE‑2026‑25623) in Arista Edge Threat Management’s browser management pipeline, but provides no PoC, exploit, or patch information.
CVE-2026-25623 Input Validation Command Execution Vulnerability in Arista Edge Threat Management NGFW https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25623
Post summary
A terse mention of CVE-2026-25623 with a link to a vulnerability database, but no evidence of exploitation, mitigation, or detailed technical data.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | arista | ng_firewall | - | - | - |