Extreme Network Fabric Engine < 9.3 Authentication Bypass (SA-2025-115)

The version of Extreme Networks Fabric Engine installed on the remote host is missing a security update. It is, therefore, affected by an authentication bypass vulnerability. - A vulnerability in Extreme Networks Fabric Engine VOSS before 9.3 was discovered. When SD-WAN AutoSense is enabled on a...

CVE-2025-11192

A vulnerability in Extreme Networks’ Fabric Engine VOSS before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious acto...

CVE-2025-11192

CVE-2025-11192 affects Extreme Networks Fabric Engine (VOSS) prior to 9.3. The vulnerability arises when SD-WAN AutoSense is enabled on a port, allowing automatic configuration of fabric connectivity without validating ISIS authentication settings, which could let an attacker gain unauthorized ac...

CVE-2025-11192: Improper Authentication

A vulnerability in Extreme Networks’ Fabric Engine VOSS before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious acto...