Unauthorized Access Vulnerability in Extreme Networks' Fabric Engine

CVE-2025-11192

What is CVE-2025-11192?

A security flaw was found in Extreme Networks' Fabric Engine (VOSS) prior to version 9.3, specifically impacting the SD-WAN AutoSense feature. This vulnerability arises when the SD-WAN AutoSense function is activated on a port, potentially leading to automatic configuration of fabric connectivity without proper validation of ISIS authentication settings. Malicious actors may exploit this flaw to gain unauthorized access to network fabrics and sensitive configuration data, raising significant security concerns for affected organizations.

References