Skip to content
OpenAdvisories

Product · Extreme Networks

Switch Engine (EXOS)

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-105440 Public exploit

    Missing authorization in the JSON-RPC web services interface of Extreme Networks Switch Engine (EXOS) allows an authent…

    Extreme Networks Switch Engine (EXOS)
  • High 8.7
    CVE-2026-8170

    ExtremeXOS Privilege Escalation via Symlink Following in File Utilities

    The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privilege boundary. An attacker with low-privilege CLI access can create a symbolic li…

    Extreme Networks Switch Engine (EXOS)
  • High 8.7
    CVE-2026-8169

    ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG

    ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expect…

    Extreme Networks Switch Engine (EXOS)