WID-SEC-W-2026-2416

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Extreme Networks ExtremeXOS: Mehrere Schwachstellen

view advisory published 2026-07-19

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Extreme Networks ExtremeXOS ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-8170US——
The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privile…
CVE-2026-8169US——
ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random sou…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan