Input Validation Flaw in Arista Next Generation Firewall Affects Users
CVE-2026-25621

7HIGH

Key Information:

Vendor

Arista Networks

Status
Arista Edge Threat Management - Arista Next Generation Firewall (ngfw)
Vendor
CVE Published:
5 June 2026

What is CVE-2026-25621?

An input validation vulnerability has been identified in the Arista Next Generation Firewall, specifically affecting version 17.4.0. This security flaw could allow unauthorized access or manipulation of system information. It is crucial for users of this version to take immediate action to mitigate potential security risks.

Affected Version(s)

Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) Arista Edge Threat Management - Arista Next Generation Firewall (Formerly Untangle) 17.4.0

References

https://www.arista.com/en/support/advisories-notices/secu...
vendor-advisory

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jon Williams & Ronan Kervella from Bishop Fox
.