CVE-2026-25620 — Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW…
Published: 2026-06-05 · CVSS: 7.0 · CVSS 4.0
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7