Extreme Networks
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Switch Engine (EXOS) | 2 | – | Jul 20, 2026 |
| Extreme Platform ONE | 1 | – | May 29, 2026 |
| ExtremeCloud IQ - Site Engine | 1 | – | Mar 2, 2026 |
| ExtremeCloud Universal ZTNA | 1 | – | Jun 13, 2025 |
| Aerohive HiveOS | 1 | – | Jan 6, 2026 |
| ExtremeGuest Essentials | 1 | – | Oct 1, 2025 |
| Fabric Engine (VOSS) | 1 | – | Oct 7, 2025 |
| ExtremeControl | 1 | – | Jul 21, 2025 |
Exploited and recent CVEs
- CVE-2026-8170 ExtremeXOS Privilege Escalation via Symlink Following in File Utilities 0.6%
- CVE-2026-8169 ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG 0.4%
- CVE-2026-9831 ExtremeCloud IQ Cross Tenant Data Exposure via Extreme Platform One Authentication Race Condition 0.2%
- CVE-2026-0689 XIQ‑SE NAC Admin Credential Exposure via HTTP Response 0.3%
- CVE-2020-36907 Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service 0.5%
- CVE-2025-11192 Fabric Engine (VOSS) AutoSense Authentication Bypass 0.3%
- CVE-2025-8679 ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force 0.3%
- CVE-2025-6235 ExtremeControl (NAC) 'onmouseover' XSS 0.3%
- CVE-2025-6083 ExtremeCloud Universal ZTNA Improper Authorization 0.2%