CVE-2025-6979

CVE-2025-6979 affects Arista Edge Threat Management – Arista NGFW: a Captive Portal authentication bypass flaw exists in the handler.py component, enabling remote attackers to bypass login if the Captive Portal is installed and enabled. ZDI-25-1019 notes exploitation requires user interaction (vi...