Security Advisory

CVE-2026-25620

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-05 19:26:36
Last updated 2026-06-05 20:23:31
Assigner Arista
CVSS score not scored
State PUBLISHED

Description

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.