extremenetworks has 3 CVEs on record between 2025 and 2026. 1 was published in the last 90 days. The median CVSS is 8.8 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Products
- IQ Engine 1
- extremeguest_essentials 1
- fabric_engine_(voss) 1
Worst active — by depth score
CVE-2025-8679Critical· 9.8In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure54CVE-2023-46273High· 8.8Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.49CVE-2025-11192High· 8.6A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered47
extremenetworks vulnerabilities
CVEs affecting extremenetworks, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2023-46273High· 8.8Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.
Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.
CVE-2025-11192High· 8.6A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered
A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-W…
CVE-2025-8679Critical· 9.8In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure
In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure. Under certain ExtremeGuest Essentials captive-portal SSID configurations, repeated manual login attempts may allow …