CVE-2026-25622

MediumCVSS 6.0/10Last modified Jul 23, 2026

Description

A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an administrative account logged into the user interface can exploit this input handling behavior to execute arbitrary platform shell commands.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Arista Networks	Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)	<= 17.4.0

References

https://www.arista.com/en/support/advisories-notices/security-advisory/23399-security-advisory-0133Vendor Advisory

Timeline

Published: Jun 5, 2026
Last modified: Jul 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-256236.0An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next CVE-2026-256244.8An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Managemen CVE-2026-256277.5NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.24.8, NanoMQ’s MQTT-over-WebSocket transport can be CVE-2026-256288.8Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files vi CVE-2026-25638.8A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. Affected is the function set_stcreenen_deabled_status/get_CVE-2026-256316.5n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node's credential domain CVE-2026-2563210.0EPyT-Flow is a Python package designed for the easy generation of hydraulic and water quality scenario data of water distribution networks. CVE-2026-256334.3Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permission to view assets CVE-2026-256347.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.CVE-2026-256358.6calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes CVE-2026-256367.8calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file CVE-2026-256375.3ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in t