1.
Bishop Fox confirms all three Arista NGFW bugs (CVE-2025-6980/6979/6978) are exploitable and patches incomplete: XSS chains to RCE with victim interaction; disable the captive portal until fixes ship.
Skip to content
Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2025-6980.