CVE-2026-25624: Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting

Severity: medium (CVSS 4.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-05 · updated 2026-07-23
Weakness: CWE-79

Description

An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.

Affected products

Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW): before 17.4.1 — fixed in 17.4.1

How to fix

Upgrade to a fixed version: Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) 17.4.1. Check the vendor advisory for mitigations.

References

https://www.arista.com/en/support/advisories-notices/security-advisory/23399-security-advisory-0133

Get alerted when CVE-2026-25624 or the next vulnerability affects your stack