PatchTheCVE: ng firewallhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-25624: An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout ohttps://patchthecve.com/cve/CVE-2026-25624.htmlhttps://patchthecve.com/cve/CVE-2026-25624.htmlThu, 23 Jul 2026 07:10:00 +0000MEDIUM 5.7: An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processiCVE-2026-25623: An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Thttps://patchthecve.com/cve/CVE-2026-25623.htmlhttps://patchthecve.com/cve/CVE-2026-25623.htmlThu, 23 Jul 2026 07:10:00 +0000MEDIUM 6.0: An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.CVE-2026-25622: A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arishttps://patchthecve.com/cve/CVE-2026-25622.htmlhttps://patchthecve.com/cve/CVE-2026-25622.htmlThu, 23 Jul 2026 07:10:00 +0000MEDIUM 6.0: A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an administrative account logged into the user interface can exploit this input handling behavior to execute arbitrary platform sheCVE-2026-25621: A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generhttps://patchthecve.com/cve/CVE-2026-25621.htmlhttps://patchthecve.com/cve/CVE-2026-25621.htmlThu, 23 Jul 2026 07:10:00 +0000MEDIUM 6.0: A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed.CVE-2026-25620: An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arhttps://patchthecve.com/cve/CVE-2026-25620.htmlhttps://patchthecve.com/cve/CVE-2026-25620.htmlThu, 23 Jul 2026 07:10:00 +0000MEDIUM 6.0: An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely affects version 17.4.0; earlier software releases are not exposed.