Read the docs
TI-2026-08610 Aliases CVE-2026-9831GHSA-w637-mwv9-mchj

ExtremeCloud IQ Cross Tenant Data Exposure via Extreme Platform One Authentication Race Condition

Priority LOW 27CWE-362Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow requests authenticated with an Extreme Platform ONE /IAM-issued API key to receive response data for another tenant. The issue was observed through ExtremeCloud IQ/XIQ API endpoints and validated against both XIQ/XAPI and Extreme Platform ONE /Common Services API paths. XIQ-native tokens and standard OAuth/Bearer JWT authentication were not affected.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00172 6th percentileScored 2026-11-07
Fix Fixed Extreme Platform ONE (Extreme Networks): 25.10.0-104

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Extreme NetworksExtreme Platform ONEbefore 25.10.0-10425.10.0-104Patch availableCNA
  • Extreme Platform ONE VendorExtreme Networks Affected before 25.10.0-104 Fixed in 25.10.0-104 Patch available CNA

Remediation

  • Fix · CNA Extreme Platform ONE (Extreme Networks) Fixed in 25.10.0-104

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-9831
  2. 2026-10-03 Alias added: GHSA-w637-mwv9-mchj

References

Advisory 1

  • TI-2020-19042 Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service CVSS 4.0HIGH 8.7
  • TI-2020-13364 Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue… CVSS 3.1HIGH 8.0
  • TI-2020-12704 The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive… CVSS 3.1CRITICAL 9.8
  • TI-2023-17891 IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow. CVSS 3.1CRITICAL 9.8
  • TI-2023-17890 IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the… CVSS 3.1CRITICAL 9.8
  • TI-2024-25570 In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path… CVSS 3.1CRITICAL 9.8
See all 34 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences