{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-25621", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-02-03T22:23:04.359Z", "datePublished": "2026-06-05T19:28:13.886Z", "dateUpdated": "2026-06-05T20:26:36.066Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-06-05T19:28:13.886Z" }, "title": "Arista Edge Threat Management NGFW Reports Application Insecure Input Validation", "datePublic": "2026-02-03T00:00:00.000Z", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE" } ] } ], "impacts": [ { "capecId": "CAPEC-88", "descriptions": [ { "lang": "en", "value": "CAPEC-88 OS Command Injection" } ] } ], "affected": [ { "vendor": "Arista Networks", "product": "Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)", "platforms": [ "Arista Edge Threat Management - Arista Next Generation Firewall (Formerly Untangle)" ], "versions": [ { "status": "affected", "version": "17.4.0", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "descriptions": [ { "lang": "en", "value": "A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed.

" } ] } ], "references": [ { "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/23399-security-advisory-0133", "tags": [ "vendor-advisory" ] } ], "configurations": [ { "lang": "en", "value": "In order to be vulnerable, the following cumulative conditions must be satisfied:\n\n * An NGFW system running exactly version 17.4.0.\n * Successful administrative interface access authentication privileges verified.\n * Navigation to the Reports application dashboard under the Data subsystem.\n * Processing an upload interaction within the Import/Restore Data Backup Files field utilizing a specially crafted malicious input file.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

In order to be vulnerable, the following cumulative conditions must be satisfied:

  1. An NGFW system running exactly version 17.4.0.
  2. Successful administrative interface access authentication privileges verified.
  3. Navigation to the Reports application dashboard under the Data subsystem.
  4. Processing an upload interaction within the Import/Restore Data Backup Files field utilizing a specially crafted malicious input file.
" } ] } ], "workarounds": [ { "lang": "en", "value": "Per operational best practice security models, do not allow unauthorized administrative access to the administrative browser.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

Per operational best practice security models, do not allow unauthorized administrative access to the administrative browser.

" } ] } ], "solutions": [ { "lang": "en", "value": "The recommended resolution is to upgrade to NGFW Version 17.4.1 at your earliest convenience.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

The recommended resolution is to upgrade to NGFW Version 17.4.1 at your earliest convenience.

" } ] } ], "credits": [ { "lang": "en", "value": "Jon Williams & Ronan Kervella from Bishop Fox", "type": "finder" } ], "source": { "defect": [ "NGFW-15491" ], "advisory": "0133", "discovery": "EXTERNAL" }, "x_generator": { "engine": "Vulnogram 1.0.2" }, "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV3_1": { "version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "LOW", "baseSeverity": "MEDIUM", "baseScore": 6, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L" } }, { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV4_0": { "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "LOW", "exploitMaturity": "NOT_DEFINED", "Safety": "PRESENT", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/S:P" } } ] }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-06-05T20:26:29.068961Z", "id": "CVE-2026-25621", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-05T20:26:36.066Z" } } ] } }