Extreme Networks vulnerabilities
10 published CVEs name Extreme Networks among the affected products.
- 10Published CVEs10 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105440
Switch Engine (EXOS) JSON-RPC Authorization Bypass Allows Read-Only Users to Disclose Sensitive Information
Extreme Networks · Switch Engine (EXOS)
High8.3 - CVE-2026-8170
ExtremeXOS Privilege Escalation via Symlink Following in File Utilities
Extreme Networks · Switch Engine (EXOS)
High8.7 - CVE-2026-8169
ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG
Extreme Networks · Switch Engine (EXOS)
High8.7 - CVE-2026-9831
ExtremeCloud IQ Cross Tenant Data Exposure via Extreme Platform One Authentication Race Condition
Extreme Networks · Extreme Platform ONE
Medium6.3 - CVE-2026-0689
XIQ‑SE NAC Admin Credential Exposure via HTTP Response
Extreme Networks · ExtremeCloud IQ - Site Engine
Medium6.0 - CVE-2020-36907
Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service
Extreme Networks · Aerohive HiveOS
High8.7 - CVE-2025-11192
Fabric Engine (VOSS) AutoSense Authentication Bypass
Extreme Networks · Fabric Engine (VOSS)
High8.4 - CVE-2025-8679
ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force
Extreme Networks · ExtremeGuest Essentials
High7.6 - CVE-2025-6235
ExtremeControl (NAC) 'onmouseover' XSS
Extreme Networks · ExtremeControl
Medium5.3 - CVE-2025-6083
ExtremeCloud Universal ZTNA Improper Authorization
Extreme Networks · ExtremeCloud Universal ZTNA
Medium5.2