Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.8 HIGH
CVE-2026-73782 — Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the abi…

| Injection
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
8.4 HIGH
CVE-2026-73781 — Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Managem…

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of th…

Remote | Cross-Site Scripting
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
8.3 HIGH
CVE-2026-73780 — Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessi…

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated att…

Remote | Cross-Site Request Forgery
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
8.2 HIGH
CVE-2026-73779 — Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Mod…

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful…

| Authentication
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
8.1 HIGH
CVE-2026-73778 — Credential Manager Vulnerability Allows Unauthorized Administrative Access

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in it…

Remote | Authentication
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
8.1 HIGH
CVE-2026-73777 — Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoi…

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

Remote | Authentication
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.9 HIGH
CVE-2026-73776 — Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to ex…

| Authentication
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.7 HIGH
CVE-2026-73775 — Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve info…

Remote | Information Disclosure
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.6 HIGH
CVE-2026-73774 — Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure i…

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the …

| Memory Corruption
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.5 HIGH
CVE-2026-73773 — Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation o…

Remote | Denial of Service
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
6.5 MEDIUM
CVE-2026-73772 — Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX

Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device.…

| Memory Corruption
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.5 HIGH
CVE-2026-73771 — Improper Authentication Handling in AOS-CX Management Interface and API

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerabilit…

Remote | Authentication
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.3 HIGH
CVE-2026-73770 — Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-…

An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control an…

| Authentication
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.3 HIGH
CVE-2026-73768 — Local Privilege Escalation in AOS-CX Command Line Interface

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands w…

| Injection
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.2 HIGH
CVE-2026-73767 — Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as…

Remote | Injection
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.2 HIGH
CVE-2026-73766 — Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could…

Remote | Injection
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.2 HIGH
CVE-2026-73765 — Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating…

Remote | Path Traversal
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.1 HIGH
CVE-2026-73764 — Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Di…

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some ca…

| Authentication
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
7.1 HIGH
CVE-2026-73763 — Unauthenticated Remote Command Execution in Management Component

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbit…

| Authentication
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
6.6 MEDIUM
CVE-2026-73762 — Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to manage…

Remote | Authorization
Sep 01, 2026 Sep 01, 2026
Sep 01, 2026
Sep 01, 2026
Showing 20 of 12519 Results