CVE-2026-105440

Missing authorization in the JSON-RPC web services interface of Extreme Networks Switch Engine EXOS allows an authenticated, low-privileged read-only user to execute CLI show commands that are restricted to that role through the command line interface. Successful exploitation results in disclosur...