Known vulnerabilities in ExtremeCloud IQ Site Engine

Vendor: Extreme Networks

Software: ExtremeCloud IQ Site Engine

Software CPE: cpe:2.3:a:extreme_networks:extremecloud_iq_site_engine:*:*:*:*:*:*:*:*

Website: https://www.extremenetworks.com/

Total vulnerabilities: 9

Public exploits: 3

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU127046 - Improper input validation CVE-2026-27135	CWE-20	Medium	No	No	26.06.10	23.04.2026	SB2026042395 SB20260423101 SB20260423102 and 37 more
#VU126937 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-41651	CWE-367	Low	Available	No	26.06.10	23.04.2026	SB2026042354 SB20260424303 SB2026042911 and 17 more
#VU122076 - Stack-based buffer overflow CVE-2025-15467	CWE-121	High	Available	No	26.02.11	27.01.2026	SB2026012785 SB2026012791 SB2026012792 and 67 more
#VU116213 - Out-of-bounds write CVE-2025-9230	CWE-787	Medium	No	No	25.11.10	01.10.2025	SB2025100119 SB2025100132 SB2025100133 and 108 more
#VU116185 - Improper Access Control CVE-2025-41244	CWE-284	High	No	Exploited	25.11.10	30.09.2025	SB2025093024 SB2025093025 SB2025093036 and 21 more
#VU115656 - Improper input validation CVE-2025-40300	CWE-20	Low	No	No	25.11.11	16.09.2025	SB20250916398 SB20250916401 SB20250916402 and 67 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2025-8194	CWE-835	Medium	No	No	25.8.11	07.08.2025	SB2025080731 SB2025080738 SB2025080739 and 93 more
#VU113313 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-38352	CWE-362	High	Available	Exploited	25.8.12	27.07.2025	SB2025072788 SB2025081507 SB20250816180 and 144 more
#VU112638 - Improper input validation CVE-2025-48385	CWE-20	High	No	No	25.8.10	09.07.2025	SB2025070989 SB2025070990 SB2025070991 and 38 more