VulnSocial

CVE-2026-9831Active Exploitation

MEDIUMCVSS 6.3 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow requests authenticated with an Extreme Platform ONE /IAM-issued API key to receive response data for another tenant. The issue was observed through ExtremeCloud IQ/XIQ API endpoints and validated against both XIQ/XAPI and Extreme Platform ONE /Common Services API paths. XIQ-native tokens and standard OAuth/Bearer JWT authentication were not affected.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-362CWE-488

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-30: 1Active Exploitation · 2026-05-30: 1Patch / Workaround · 2026-05-30: 1Technical Details · 2026-05-30: 105-30
Signal classification1 categories
Active Exploitation
1100.0%
Full discourse1 post
  • NerdieNews@NewsNerdie
    Active Exploitation

    ⚠️ CVE-2026-9831 in ExtremeCloud IQ is being exploited, allowing attackers to access cross-tenant data via a race condition. This poses a major security threat. Patch now to protect your data integrity. #NerdieNews #CyberSecurity #Vulnerability https://t.co/1d8paXel2c

    Post summary

    CVE-2026-9831 is actively exploited in ExtremeCloud IQ, enabling attackers to read cross‑tenant data through a race condition, and vendors urge users to patch immediately.

    0000049
    64 followersView on X

Explore more

Back to dashboard