Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-06 | 2 | Disclosure1General1 |
| 2026-06-08 | 1 | General1 |
🟠 Arista NGFW, Cross-Site Scripting (XSS), #CVE-2026-25624 (MEDIUM) -DC-Jun2026-289 https://dailycve.com/arista-ngfw-cross-site-scripting-xss-cve-2026-25624-medium-dc-jun2026-289/
Post summary
The post announces a new Cross‑Site Scripting vulnerability (CVE‑2026‑25624) in Arista NGFW, noting its MEDIUM severity, with a link to a DailyCVE article for additional details.
CVE-2026-25624 An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation… https://www.cve.org/CVERecord?id=CVE-2026-25624
Post summary
The text announces an administrative XSS vulnerability in Arista Edge Threat Management’s web UI, providing minimal technical detail but no PoC, exploit code, patch, or evidence of active exploitation.
CVE-2026-25624 Administrative Cross-Site Scripting Vulnerability in Arista Edge Threat Management NGFW Dashboard https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25624
Post summary
The text announces an administrative XSS vulnerability for Arista Edge Threat Management, but provides no actionable PoC, exploit details, or mitigation guidance.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | arista | ng_firewall | - | - | - |