Refine your search
3 vulnerabilities found for Navigator NCS by Ciena
CVE-2026-5267 (GCVE-0-2026-5267)
Vulnerability from cvelistv5
Published
2026-09-25 19:10
Modified
2026-09-25 20:40
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-306 - Missing authentication for critical function
Summary
Ciena Navigator Network
Control Suite (NCS) contains an information exposure vulnerability in an
event-streaming API that does not properly enforce authentication. An
unauthenticated attacker with network access to the affected service could
access the event stream and potentially obtain sensitive information.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Ciena | Navigator NCS |
Version: 7.2 and any older release Version: 7.2-P01 through 7.2-P07 Version: 8.0 Version: 8.0-P01 through 8.0-P06A Version: 8.1 Version: 8.1-P01 through 8.1-P06 Version: 8.2 Version: 8.2-P01 through 8.2-P06 Version: 9.0 Version: 9.0-P01 through 9.0-P05A Version: 9.1 Version: 9.1-P01 through 9.1-P05 Version: 9.2 Version: 9.2-P01 through 9.2-P02 Version: 10.0 Version: 10.0-P01 through 10.0-P01B |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-5267",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-25T20:40:10.302755Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-25T20:40:31.039Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Navigator NCS",
"vendor": "Ciena",
"versions": [
{
"status": "affected",
"version": "7.2 and any older release"
},
{
"status": "affected",
"version": "7.2-P01 through 7.2-P07"
},
{
"status": "affected",
"version": "8.0"
},
{
"status": "affected",
"version": "8.0-P01 through 8.0-P06A"
},
{
"status": "affected",
"version": "8.1"
},
{
"status": "affected",
"version": "8.1-P01 through 8.1-P06"
},
{
"status": "affected",
"version": "8.2"
},
{
"status": "affected",
"version": "8.2-P01 through 8.2-P06"
},
{
"status": "affected",
"version": "9.0"
},
{
"status": "affected",
"version": "9.0-P01 through 9.0-P05A"
},
{
"status": "affected",
"version": "9.1"
},
{
"status": "affected",
"version": "9.1-P01 through 9.1-P05"
},
{
"status": "affected",
"version": "9.2"
},
{
"status": "affected",
"version": "9.2-P01 through 9.2-P02"
},
{
"status": "affected",
"version": "10.0"
},
{
"status": "affected",
"version": "10.0-P01 through 10.0-P01B"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Special thanks to Gev Manekshaw"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCiena Navigator Network\nControl Suite (NCS) contains an information exposure vulnerability in an\nevent-streaming API that does not properly enforce authentication. An\nunauthenticated attacker with network access to the affected service could\naccess the event stream and potentially obtain sensitive information.\u003c/p\u003e"
}
],
"value": "Ciena Navigator Network\nControl Suite (NCS) contains an information exposure vulnerability in an\nevent-streaming API that does not properly enforce authentication. An\nunauthenticated attacker with network access to the affected service could\naccess the event stream and potentially obtain sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing authentication for critical function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-25T19:10:46.330Z",
"orgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb",
"shortName": "Ciena"
},
"references": [
{
"url": "https://www.ciena.com/product-security"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Ciena recommends upgrading to the latest available remediated release. For additional details, refer to myciena.com for current software versions, fixes, and security advisories.\u003cdiv\u003e\u003cp\u003e\u003cb\u003eRemediation and Fixes: \u003c/b\u003e\u003c/p\u003e\n\n\u003ctable\u003e\n \u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003e\u003cb\u003e\u0026nbsp;Products \u003c/b\u003e\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u003cb\u003eRemediated Version\u003c/b\u003e\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eNavigator NCS\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e8.0-P06B and\n later\u003c/p\u003e\n \u003cp\u003e8.1-P06A and\n later\u003c/p\u003e\n \u003cp\u003e8.2-P07 and\n later\u003c/p\u003e\n \u003cp\u003e9.0-P05B and\n later\u003c/p\u003e\n \u003cp\u003e9.1-P05A and\n later\u003c/p\u003e\n \u003cp\u003e9.2-P02A and\n later\u003c/p\u003e\n \u003cp\u003e10.0-P01C and later\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "Ciena recommends upgrading to the latest available remediated release. For additional details, refer to myciena.com for current software versions, fixes, and security advisories.\n\nRemediation and Fixes: \n\n\n\n\n \n \n \n\n\u00a0Products \n\n\n \n \n \n\nRemediated Version\n\n\n \n \n \n \n \n\nNavigator NCS\n\n\n \n \n \n\n8.0-P06B and\n later\n\n\n \n\n8.1-P06A and\n later\n\n\n \n\n8.2-P07 and\n later\n\n\n \n\n9.0-P05B and\n later\n\n\n \n\n9.1-P05A and\n later\n\n\n \n\n9.2-P02A and\n later\n\n\n \n\n10.0-P01C and later"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS",
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb",
"assignerShortName": "Ciena",
"cveId": "CVE-2026-5267",
"datePublished": "2026-09-25T19:10:46.330Z",
"dateReserved": "2026-03-31T19:44:26.584Z",
"dateUpdated": "2026-09-25T20:40:31.039Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-5269 (GCVE-0-2026-5269)
Vulnerability from cvelistv5
Published
2026-07-14 22:25
Modified
2026-07-15 14:30
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-1393 - Use of default password
Summary
In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker could combine an attack using one of these accounts with other potential weaknesses to launch a more significant attack, possibly leading to escalation of privilege on the system.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CIENA | Navigator NCS |
Version: 8.1 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-5269",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-15T14:30:47.245049Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T14:30:50.769Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Navigator NCS",
"vendor": "CIENA",
"versions": [
{
"status": "affected",
"version": "8.1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "MCP",
"vendor": "CIENA",
"versions": [
{
"status": "affected",
"version": "\u003c= 8.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Planner Plus OnPrem",
"vendor": "CIENA",
"versions": [
{
"status": "affected",
"version": "\u003c= 4.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Special thanks to the team at TDC NET for their contribution."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "In Ciena\u0027s Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker could combine an attack using one of these accounts with other potential weaknesses to launch a more significant attack, possibly leading to escalation of privilege on the system.\u0026nbsp;"
}
],
"value": "In Ciena\u0027s Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker could combine an attack using one of these accounts with other potential weaknesses to launch a more significant attack, possibly leading to escalation of privilege on the system."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1393",
"description": "CWE-1393 Use of default password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T22:25:55.317Z",
"orgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb",
"shortName": "Ciena"
},
"references": [
{
"url": "https://www.ciena.com/product-security"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCiena recommends upgrading to the latest\navailable remediated release. For additional details, refer to myciena.com for\ncurrent software versions, fixes, and security advisories.\u003c/p\u003e\n\n\u003cp\u003e\u0026nbsp;\u003c/p\u003e\n\n\u003cp\u003e\u003cb\u003eRemediation\nand Fixes: \u003c/b\u003e\u003c/p\u003e\n\n\u003ctable\u003e\n \u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003e\u003cb\u003e\u0026nbsp;Products \u003c/b\u003e\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u003cb\u003eRemediated Version\u003c/b\u003e\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eNavigator NCS\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u0026gt;= 8.2, 8.1-P02\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eMCP\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e8.0-P04, 7.2-P07\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003ePlanner Plus OnPrem\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u0026gt;= 4.2, 4.1-P01\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e"
}
],
"value": "Ciena recommends upgrading to the latest\navailable remediated release. For additional details, refer to myciena.com for\ncurrent software versions, fixes, and security advisories.\n\n\n\n\n\n\u00a0\n\n\n\n\n\nRemediation\nand Fixes: \n\n\n\n\n \n \n \n\n\u00a0Products \n\n\n \n \n \n\nRemediated Version\n\n\n \n \n \n \n \n\nNavigator NCS\n\n\n \n \n \n\n\u003e= 8.2, 8.1-P02\n\n\n \n \n \n \n \n\nMCP\n\n\n \n \n \n\n8.0-P04, 7.2-P07\n\n\n \n \n \n \n \n\nPlanner Plus OnPrem\n\n\n \n \n \n\n\u003e= 4.2, 4.1-P01"
}
],
"title": "Navigator NCS and MCP System Accounts with Default Passwords",
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb",
"assignerShortName": "Ciena",
"cveId": "CVE-2026-5269",
"datePublished": "2026-07-14T22:25:55.317Z",
"dateReserved": "2026-03-31T19:44:35.713Z",
"dateUpdated": "2026-07-15T14:30:50.769Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-5270 (GCVE-0-2026-5270)
Vulnerability from cvelistv5
Published
2026-07-14 22:24
Modified
2026-07-15 12:39
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-287 - Improper Authentication
Summary
An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate requests in a manner that bypasses authentication and associated audit logging controls.
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CIENA | Navigator NCS |
Version: 8.1 |
||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-5270",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-15T12:39:26.968950Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T12:39:32.248Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Navigator NCS",
"vendor": "CIENA",
"versions": [
{
"status": "affected",
"version": "8.1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "MCP",
"vendor": "CIENA",
"versions": [
{
"status": "affected",
"version": "\u003c= 8.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Planner Plus OnPrem",
"vendor": "CIENA",
"versions": [
{
"status": "affected",
"version": "\u003c= 4.1"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Inventory",
"vendor": "Blue Planet",
"versions": [
{
"status": "affected",
"version": "\u003c=24.04.001"
},
{
"status": "affected",
"version": "\u003c=23.12.401"
},
{
"status": "affected",
"version": "\u003c=23.08.302"
},
{
"status": "affected",
"version": "\u003c=23.04.701"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Orchestration",
"vendor": "Blue Planet",
"versions": [
{
"status": "affected",
"version": "\u003c=24.04.2"
},
{
"status": "affected",
"version": "\u003c=23.12.3"
},
{
"status": "affected",
"version": "\u003c=23.08.4"
},
{
"status": "affected",
"version": "\u003c=23.04.2"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Route Optimization \u0026 Analysis",
"vendor": "Blue Planet",
"versions": [
{
"status": "affected",
"version": "\u003c=24.04.1.2-R"
},
{
"status": "affected",
"version": "\u003c=23.12.1.6-R"
},
{
"status": "affected",
"version": "\u003c=23.08.1.6-R"
},
{
"status": "affected",
"version": "\u003c=23.04.P01-9-R"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Unified Assurance \u0026 Analytics",
"vendor": "Blue Planet",
"versions": [
{
"status": "affected",
"version": "\u003c=24.04 MR1"
},
{
"status": "affected",
"version": "\u003c=23.12 MR3"
},
{
"status": "affected",
"version": "\u003c=23.04. MR4"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Special thanks to the team at TDC NET for their contribution."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet\u0026nbsp;products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate requests in a manner that bypasses authentication and associated audit logging controls."
}
],
"value": "An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet\u00a0products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate requests in a manner that bypasses authentication and associated audit logging controls."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T22:24:34.750Z",
"orgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb",
"shortName": "Ciena"
},
"references": [
{
"url": "https://www.ciena.com/product-security"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCiena recommends upgrading to the latest\navailable remediated release. For additional details, refer to myciena.com for\ncurrent software versions, fixes, and security advisories.\u003c/p\u003e\n\n\u003cp\u003e\u0026nbsp;\u003c/p\u003e\n\n\u003cp\u003e\u003cb\u003eRemediation\nand Fixes: \u003c/b\u003e\u003c/p\u003e\n\n\u003ctable\u003e\n \u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003e\u003cb\u003e\u0026nbsp;Products \u003c/b\u003e\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u003cb\u003eRemediated Version\u003c/b\u003e\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eBP Inventory\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u0026gt;=24.08, 24.04.100, 23.12.500, 23.08.400,\n 23.04.800\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eBP Orchestration \u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u0026gt;=24.08, 24.04.3 MR3, 23.12.4 MR4,\n 23.08.5 MR5, \u003cbr\u003e\n 23.04.4 MR3\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eBP Route Optimization \u0026amp; Analysis\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u0026gt;=24.08, 24.04.2-3-R, 23.12.2.1-R, 23.08.2.-1-R, \u003cbr\u003e\n 23.04.P02-1-R\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eBP Unified Assurance \u0026amp; Analytics \u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u0026gt;=24.08, 24.04.MR2, 23.12.MR4\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eNavigator NCS\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u0026gt;= 8.2, 8.1-P02\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eMCP\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e8.0-P04, 7.2-P07\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003ePlanner Plus OnPrem\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u0026gt;= 4.2, 4.1-P01\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e"
}
],
"value": "Ciena recommends upgrading to the latest\navailable remediated release. For additional details, refer to myciena.com for\ncurrent software versions, fixes, and security advisories.\n\n\n\n\n\n\u00a0\n\n\n\n\n\nRemediation\nand Fixes: \n\n\n\n\n \n \n \n\n\u00a0Products \n\n\n \n \n \n\nRemediated Version\n\n\n \n \n \n \n \n\nBP Inventory\n\n\n \n \n \n\n\u003e=24.08, 24.04.100, 23.12.500, 23.08.400,\n 23.04.800\n\n\n \n \n \n \n \n\nBP Orchestration \n\n\n \n \n \n\n\u003e=24.08, 24.04.3 MR3, 23.12.4 MR4,\n 23.08.5 MR5, \n\n 23.04.4 MR3\n\n\n \n \n \n \n \n\nBP Route Optimization \u0026 Analysis\n\n\n \n \n \n\n\u003e=24.08, 24.04.2-3-R, 23.12.2.1-R, 23.08.2.-1-R, \n\n 23.04.P02-1-R\n\n\n \n \n \n \n \n\nBP Unified Assurance \u0026 Analytics \n\n\n \n \n \n\n\u003e=24.08, 24.04.MR2, 23.12.MR4\n\n\n \n \n \n \n \n\nNavigator NCS\n\n\n \n \n \n\n\u003e= 8.2, 8.1-P02\n\n\n \n \n \n \n \n\nMCP\n\n\n \n \n \n\n8.0-P04, 7.2-P07\n\n\n \n \n \n \n \n\nPlanner Plus OnPrem\n\n\n \n \n \n\n\u003e= 4.2, 4.1-P01"
}
],
"title": "Authentication Bypass in Navigator and Blue Planet Products",
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb",
"assignerShortName": "Ciena",
"cveId": "CVE-2026-5270",
"datePublished": "2026-07-14T22:24:34.750Z",
"dateReserved": "2026-03-31T19:44:41.118Z",
"dateUpdated": "2026-07-15T12:39:32.248Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}