CVE-2023-46271

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ah_webui service, which listens on TCP port 3009 by default.

Published 2025-02-19. Last modified 2026-06-17.