---
id: 3853
title: "[CVE-2025-6980] Arista NextGen Firewall XSS to RCE Chain"
cve: CVE-2025-6980
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/arista-nextgen-firewall-xss-to-rce-chain"
published_at: "2025-12-04 00:00"
tags: ["rce", "xss", "patching", "firewall", "arista", "cve-2025-6978"]
phying_url: "https://phying.com/item/3853"
lang: en
---

# [CVE-2025-6980] Arista NextGen Firewall XSS to RCE Chain

## Summary

Bishop Fox confirms all three Arista NGFW bugs (CVE-2025-6980/6979/6978) are exploitable and patches incomplete: XSS chains to RCE with victim interaction; disable the captive portal until fixes ship.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2025-6980
- **Published:** 2025-12-04 00:00
- **Original:** https://bishopfox.com/blog/arista-nextgen-firewall-xss-to-rce-chain
- **Phying News:** https://phying.com/item/3853