Switch Engine (EXOS) vulnerabilities

2 known vulnerabilities in Switch Engine (EXOS) from Extreme Networks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Switch Engine (EXOS): Improper Link Resolution Before File Access

  CVE-2026-8170Jul 20, 2026Extreme Networks

  The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privilege boundary. An attacker with low-privilege CLI access can create a symbolic lin

• 8.7 High severity

  Switch Engine (EXOS): Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-8169Jul 20, 2026Extreme Networks

  ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expecte