This vulnerability (CVE-2026-25620) affects Arista Networks' Arista Edge Threat Management - NGFW version 17.4.0. It is classified as CWE-78, an OS command injection flaw, specifically in the Captive Portal application framework where encrypted password commands are improperly neutralized. The vulnerability allows an attacker with high privileges to execute arbitrary OS commands, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 6.0 with network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and low availability impact. There is no vendor advisory or patch information available at this time.

Successful exploitation could allow an attacker with high privileges to execute arbitrary OS commands on the affected system, potentially leading to partial confidentiality compromise, limited integrity impact, and limited availability impact. The vulnerability is limited to version 17.4.0 of the product; earlier versions are not affected. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been published, organizations should monitor Arista Networks' advisories for updates. Until a patch is available, restrict access to the affected system to trusted administrators only and consider additional compensating controls to limit exposure.