CVE-2025-6978: Arbitrary Code Execution in the Arista NG Firewall

Back Zerodayinitiative

CVE-2025-6978: Arbitrary Code Execution in the Arista NG Firewall

Zerodayinitiative • February 5, 2026

Share: View original

In this excerpt of a TrendAI Research Services vulnerability report, Jonathan Lein and Simon Humbert of the TrendAI Research team detail a ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2025-6978: Command Injection in Arista NG Firewall CVE-2025-6978 is a command injection vulnerability in the Arista NG Firewall that allows for arbitrary code execution under the root user context. The vulnerability was discovered by Gereon Huppertz and reported through the TrendAI Zero Day Initiative program. A patch has been released to address this security issue. 2 sources 61

Extracted Entities

CVEs (1)

Platforms (1)

Arista NG Firewall