CVE-2026-105440

Extreme Networks ExtremeXOS: Schwachstelle ermöglicht Offenlegung von Informationen

Extreme Networks ExtremeXOS

Missing authorization in the JSON-RPC web services interface of Extreme Networks Switch Engine (EXOS) allows an authenticated, low-privileged (read-only) user to execute CLI show commands that are restricted to that role through the command line interface. Successful exploitation results in disclosure of sensitive information, including the device configuration and the password hashes of local accounts. Configuration, enable, and debug commands are not affected. Disclosed…

11. Nov 2026

Ausgewertete Quellen

• CERT-Bund
  WID-SEC-2026-4537
• NVD
  CVE-2026-105440