← Volver al buscador de CVEs

CVE-2026-5268

Ciena products

Descripción

An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.

CVSS 9.1EPSS 0.42%Riesgo 0.94
Ver fuente
Publicación
2026-07-06 16:16:38
Versiones afectadas
unknown
Tipo
Firmware
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N