What’s Vulnerable › Vulnerabilities

CVE-2023-46273

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-14 · updated 2026-09-22
• Weakness: CWE-121

Description

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.

Affected products

• extremenetworks IQ Engine: before 10.6r1a; from 10.6r2 before 10.6r5 — fixed in 10.6r1a, 10.6r5

How to fix

Upgrade to a fixed version: extremenetworks IQ Engine 10.6r1a, 10.6r5. Check the vendor advisory for mitigations.

References

• https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115356
• https://extremenetworks.com

Get alerted when CVE-2023-46273 or the next vulnerability affects your stack