Skip to content
Threat Feed
Subscribe

Product

Switch Engine

1 brief RSS
high threat

Extreme Networks Switch Engine: Broken Access Control in JSON-RPC API (CVE-2026-105440)

An authorization bypass vulnerability in the Extreme Networks Switch Engine (EXOS) JSON-RPC API allows low-privileged users to execute unauthorized CLI commands to disclose system configuration and account password hashes.

exploited Switch Engine +1 toanln-cov cve-2026-105440 broken-access-control privilege-escalation
2t 1c