Skip to content
OpenAdvisories

Vendor

Extreme Networks

11 known vulnerabilities.

Products

Switch Engine (EXOS) 3 ExtremeCloud Universal ZTNA 1 Extreme Platform ONE 1 IQ Engine 1 Aerohive HiveOS 1 ExtremeCloud IQ - Site Engine 1 ExtremeGuest Essentials 1 Fabric Engine (VOSS) 1 ExtremeControl 1 HiveOS 0 IQ Engine < 10.6r5 0 IQ Engine < 10.6r2 0 ExtremeXOS 0 ExtremeXOS < 22.7.5.1 0 ExtremeXOS < 31.3.100 0 ExtremeXOS < 31.7.2.28 0 ExtremeXOS < 32.5.1.5 0 Extreme Management Center 0 HiveManager Classic On-Premises < XIQ 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-9831

    ExtremeCloud IQ Cross Tenant Data Exposure via Extreme Platform One Authentication Race Condition

    A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow requests authenticated with an Extreme Platform ONE /IAM-issued API key to receive resp…

    Extreme Networks Extreme Platform ONE
  • Medium 6.0
    CVE-2026-0689

    XIQ‑SE NAC Admin Credential Exposure via HTTP Response

    In ExtremeCloud IQ – Site Engine (XIQ‑SE) before 26.2.10, a vulnerability in the NAC administration interface allows an authenticated NAC administrator to retrieve masked sensitive parameters from HTTP responses. Although credentials appear redacted in the us…

    Extreme Networks ExtremeCloud IQ - Site Engine
  • Medium 5.3
    CVE-2025-6235

    ExtremeControl (NAC) 'onmouseover' XSS

    In ExtremeControl before 25.5.12, a cross-site scripting (XSS) vulnerability was discovered in a login interface of the affected application. The issue stems from improper handling of user-supplied input within HTML attributes, allowing an attacker to inject …

    Extreme Networks ExtremeControl
  • Medium 5.2
    CVE-2025-6083

    ExtremeCloud Universal ZTNA Improper Authorization

    In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the owner_id filter. This issue may allow users to search data across the entire table instead of being restricted to their specific owner_id.

    Extreme Networks ExtremeCloud Universal ZTNA