What is CVE-2025-11192?

CVE-2025-11192 is a high-severity vulnerability in Extreme Networks Fabric Engine (Voss), classified under Improper Authentication. CVSS score: 8.6/10. Published 2025-10-07.

How severe is CVE-2025-11192?

High severity. CVSS v3 base score is 8.6 out of 10.

Auth bypass in Extreme Networks Fabric Engine (Voss)

CVE-2025-11192

A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious actors by allowing unauthorized access to network fabric and configuration data.

Vulnerability class: Broken Authentication

EPSS: 0.003 (25.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.

Affected products

Extreme Networks Fabric Engine (Voss) — versions 9.2
Extremenetworks Fabric_engine_\(voss\)

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

1c053176-eef3-4d6a-ae0b-24728c86587b (Vendor Advisory)

Frequently asked questions

What is CVE-2025-11192?: CVE-2025-11192 is a high-severity vulnerability in Extreme Networks Fabric Engine (Voss), classified under Improper Authentication. CVSS score: 8.6/10. Published 2025-10-07.
How severe is CVE-2025-11192?: High severity. CVSS v3 base score is 8.6 out of 10.