CVE Program partner

ExtremeNetworks

Extreme Networks, Inc.

API
CVEs, 365 days48 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationExtreme Networks, Inc.
RoleCNA
TypeVendor
Reports tomitre
ScopeVulnerabilities discovered in Extreme Networks, Inc.’s products and services.
Advisorieshttps://extreme-networks.my.site.com/ExtrSearch#q=cve&t=Knowledge&sort=relevancy&f:@sfrecordtypename=[Security_Advisory]

Latest CVEs · RSS

  • CVE-2026-8170 2026-07-20 · CVSS 8.7
    The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to safely canonicalize paths and follow symbolic links outside of
  • CVE-2026-8169 2026-07-20 · CVSS 8.7
    ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insuf
  • CVE-2026-9831 2026-05-29 · CVSS 6.3
    A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermitt
  • CVE-2026-0689 2026-03-02 · CVSS 6.0
    In ExtremeCloud IQ – Site Engine (XIQ‑SE) before 26.2.10, a vulnerability in the NAC administration interface allows an authenticated NAC administrator to retri
  • CVE-2025-11192 2025-10-07 · CVSS 8.4
    A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure
  • CVE-2025-8679 2025-10-01 · CVSS 7.6
    In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure. Under certain ExtremeGuest Essentials
  • CVE-2025-6235 2025-07-21 · CVSS 5.3
    In ExtremeControl before 25.5.12, a cross-site scripting (XSS) vulnerability was discovered in a login interface of the affected application. The issue stems fr
  • CVE-2025-6083 2025-06-13 · CVSS 5.2
    In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the owner_id filter. This issue may allow users to sear

All CVE Program partners