Back to directory

WRITEUP #6598

Deep Dive into Arista NG Firewall 17.4 Vulnerabilities

Network SecurityXSSRCECommand Injection

byRonan Kervella

Program

Self-managed

Published

Feb 9, 2026

Added to HackDex

Mar 17, 2026

Read Full Writeuphttps://bishopfox.com/blog/arista-nextgen-firewall-version-17-4-advisory

▸ RELATED WRITEUPS

From MLOps to MLOops: Exposing the Attack Surface of Machine Learning Platforms

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!

RCEConfusion attack

Studying 0days: How we hacked Anki, the world's most popular flashcard app

RCEComponents with known vulnerabilities

We hacked Anki - 0 day exploit from studying someone elses flashcards

RCEComponents with known vulnerabilities

Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge Remote-Code Execution

Built with ❤️ by Shubham Rawat