CVE-2026-105440

Extreme Networks Switch Engine (EXOS) contains a missing authorization vulnerability in its JSON-RPC web services interface. This flaw allows an authenticated, low-privileged (read-only) user to execute restricted CLI show commands , potentially leading to the disclosure of sensitive information ...