CVE-2026-105440 Switch Engine (EXOS) JSON-RPC Authorization Bypass Allows Read-Only Users to Disclose Sensitive Information

Missing authorization in the JSON-RPC web services interface of Extreme Networks Switch Engine EXOS allows an authenticated, low-privileged read-only user to execute CLI show commands that are restricted to that role through the command line interface. Successful exploitation results in disclosur...