Extreme Networks vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 20265

Newest CVEs

• CVE-2026-8170

  ExtremeXOS Privilege Escalation via Symlink Following in File Utilities

  Extreme Networks · Switch Engine (EXOS)

  High8.7
• CVE-2026-8169

  ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG

  Extreme Networks · Switch Engine (EXOS)

  High8.7
• CVE-2026-9831

  ExtremeCloud IQ Cross Tenant Data Exposure via Extreme Platform One Authentication Race Condition

  Extreme Networks · Extreme Platform ONE

  Medium6.3
• CVE-2026-0689

  XIQ‑SE NAC Admin Credential Exposure via HTTP Response

  Extreme Networks · ExtremeCloud IQ - Site Engine

  Medium6.0
• CVE-2020-36907

  Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service

  Extreme Networks · Aerohive HiveOS

  High8.7
• CVE-2025-11192

  Fabric Engine (VOSS) AutoSense Authentication Bypass

  Extreme Networks · Fabric Engine (VOSS)

  High8.4
• CVE-2025-8679

  ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force

  Extreme Networks · ExtremeGuest Essentials

  High7.6
• CVE-2025-6235

  ExtremeControl (NAC) 'onmouseover' XSS

  Extreme Networks · ExtremeControl

  Medium5.3
• CVE-2025-6083

  ExtremeCloud Universal ZTNA Improper Authorization

  Extreme Networks · ExtremeCloud Universal ZTNA

  Medium5.2