CVE-2026-5267 (GCVE-0-2026-5267)
Vulnerability from cvelistv5
Published
2026-09-25 19:10
Modified
2026-09-25 20:40
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-306 - Missing authentication for critical function
Summary
Ciena Navigator Network
Control Suite (NCS) contains an information exposure vulnerability in an
event-streaming API that does not properly enforce authentication. An
unauthenticated attacker with network access to the affected service could
access the event stream and potentially obtain sensitive information.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Ciena | Navigator NCS |
Version: 7.2 and any older release Version: 7.2-P01 through 7.2-P07 Version: 8.0 Version: 8.0-P01 through 8.0-P06A Version: 8.1 Version: 8.1-P01 through 8.1-P06 Version: 8.2 Version: 8.2-P01 through 8.2-P06 Version: 9.0 Version: 9.0-P01 through 9.0-P05A Version: 9.1 Version: 9.1-P01 through 9.1-P05 Version: 9.2 Version: 9.2-P01 through 9.2-P02 Version: 10.0 Version: 10.0-P01 through 10.0-P01B |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-5267",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-25T20:40:10.302755Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-25T20:40:31.039Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Navigator NCS",
"vendor": "Ciena",
"versions": [
{
"status": "affected",
"version": "7.2 and any older release"
},
{
"status": "affected",
"version": "7.2-P01 through 7.2-P07"
},
{
"status": "affected",
"version": "8.0"
},
{
"status": "affected",
"version": "8.0-P01 through 8.0-P06A"
},
{
"status": "affected",
"version": "8.1"
},
{
"status": "affected",
"version": "8.1-P01 through 8.1-P06"
},
{
"status": "affected",
"version": "8.2"
},
{
"status": "affected",
"version": "8.2-P01 through 8.2-P06"
},
{
"status": "affected",
"version": "9.0"
},
{
"status": "affected",
"version": "9.0-P01 through 9.0-P05A"
},
{
"status": "affected",
"version": "9.1"
},
{
"status": "affected",
"version": "9.1-P01 through 9.1-P05"
},
{
"status": "affected",
"version": "9.2"
},
{
"status": "affected",
"version": "9.2-P01 through 9.2-P02"
},
{
"status": "affected",
"version": "10.0"
},
{
"status": "affected",
"version": "10.0-P01 through 10.0-P01B"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Special thanks to Gev Manekshaw"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCiena Navigator Network\nControl Suite (NCS) contains an information exposure vulnerability in an\nevent-streaming API that does not properly enforce authentication. An\nunauthenticated attacker with network access to the affected service could\naccess the event stream and potentially obtain sensitive information.\u003c/p\u003e"
}
],
"value": "Ciena Navigator Network\nControl Suite (NCS) contains an information exposure vulnerability in an\nevent-streaming API that does not properly enforce authentication. An\nunauthenticated attacker with network access to the affected service could\naccess the event stream and potentially obtain sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing authentication for critical function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-25T19:10:46.330Z",
"orgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb",
"shortName": "Ciena"
},
"references": [
{
"url": "https://www.ciena.com/product-security"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Ciena recommends upgrading to the latest available remediated release. For additional details, refer to myciena.com for current software versions, fixes, and security advisories.\u003cdiv\u003e\u003cp\u003e\u003cb\u003eRemediation and Fixes: \u003c/b\u003e\u003c/p\u003e\n\n\u003ctable\u003e\n \u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003e\u003cb\u003e\u0026nbsp;Products \u003c/b\u003e\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e\u003cb\u003eRemediated Version\u003c/b\u003e\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\n \u003cp\u003eNavigator NCS\u003c/p\u003e\n \u003c/td\u003e\n \u003ctd\u003e\n \u003cp\u003e8.0-P06B and\n later\u003c/p\u003e\n \u003cp\u003e8.1-P06A and\n later\u003c/p\u003e\n \u003cp\u003e8.2-P07 and\n later\u003c/p\u003e\n \u003cp\u003e9.0-P05B and\n later\u003c/p\u003e\n \u003cp\u003e9.1-P05A and\n later\u003c/p\u003e\n \u003cp\u003e9.2-P02A and\n later\u003c/p\u003e\n \u003cp\u003e10.0-P01C and later\u003c/p\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "Ciena recommends upgrading to the latest available remediated release. For additional details, refer to myciena.com for current software versions, fixes, and security advisories.\n\nRemediation and Fixes: \n\n\n\n\n \n \n \n\n\u00a0Products \n\n\n \n \n \n\nRemediated Version\n\n\n \n \n \n \n \n\nNavigator NCS\n\n\n \n \n \n\n8.0-P06B and\n later\n\n\n \n\n8.1-P06A and\n later\n\n\n \n\n8.2-P07 and\n later\n\n\n \n\n9.0-P05B and\n later\n\n\n \n\n9.1-P05A and\n later\n\n\n \n\n9.2-P02A and\n later\n\n\n \n\n10.0-P01C and later"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS",
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb",
"assignerShortName": "Ciena",
"cveId": "CVE-2026-5267",
"datePublished": "2026-09-25T19:10:46.330Z",
"dateReserved": "2026-03-31T19:44:26.584Z",
"dateUpdated": "2026-09-25T20:40:31.039Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-5267\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-25T20:40:10.302755Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-25T20:40:26.271Z\"}}], \"cna\": {\"title\": \"Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"Special thanks to Gev Manekshaw\"}], \"affected\": [{\"vendor\": \"Ciena\", \"product\": \"Navigator NCS\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.2 and any older release\"}, {\"status\": \"affected\", \"version\": \"7.2-P01 through 7.2-P07\"}, {\"status\": \"affected\", \"version\": \"8.0\"}, {\"status\": \"affected\", \"version\": \"8.0-P01 through 8.0-P06A\"}, {\"status\": \"affected\", \"version\": \"8.1\"}, {\"status\": \"affected\", \"version\": \"8.1-P01 through 8.1-P06\"}, {\"status\": \"affected\", \"version\": \"8.2\"}, {\"status\": \"affected\", \"version\": \"8.2-P01 through 8.2-P06\"}, {\"status\": \"affected\", \"version\": \"9.0\"}, {\"status\": \"affected\", \"version\": \"9.0-P01 through 9.0-P05A\"}, {\"status\": \"affected\", \"version\": \"9.1\"}, {\"status\": \"affected\", \"version\": \"9.1-P01 through 9.1-P05\"}, {\"status\": \"affected\", \"version\": \"9.2\"}, {\"status\": \"affected\", \"version\": \"9.2-P01 through 9.2-P02\"}, {\"status\": \"affected\", \"version\": \"10.0\"}, {\"status\": \"affected\", \"version\": \"10.0-P01 through 10.0-P01B\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Ciena recommends upgrading to the latest available remediated release. For additional details, refer to myciena.com for current software versions, fixes, and security advisories.\\n\\nRemediation and Fixes: \\n\\n\\n\\n\\n \\n \\n \\n\\n\\u00a0Products \\n\\n\\n \\n \\n \\n\\nRemediated Version\\n\\n\\n \\n \\n \\n \\n \\n\\nNavigator NCS\\n\\n\\n \\n \\n \\n\\n8.0-P06B and\\n later\\n\\n\\n \\n\\n8.1-P06A and\\n later\\n\\n\\n \\n\\n8.2-P07 and\\n later\\n\\n\\n \\n\\n9.0-P05B and\\n later\\n\\n\\n \\n\\n9.1-P05A and\\n later\\n\\n\\n \\n\\n9.2-P02A and\\n later\\n\\n\\n \\n\\n10.0-P01C and later\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Ciena recommends upgrading to the latest available remediated release. For additional details, refer to myciena.com for current software versions, fixes, and security advisories.\u003cdiv\u003e\u003cp\u003e\u003cb\u003eRemediation and Fixes: \u003c/b\u003e\u003c/p\u003e\\n\\n\u003ctable\u003e\\n \u003ctbody\u003e\u003ctr\u003e\\n \u003ctd\u003e\\n \u003cp\u003e\u003cb\u003e\u0026nbsp;Products \u003c/b\u003e\u003c/p\u003e\\n \u003c/td\u003e\\n \u003ctd\u003e\\n \u003cp\u003e\u003cb\u003eRemediated Version\u003c/b\u003e\u003c/p\u003e\\n \u003c/td\u003e\\n \u003c/tr\u003e\\n \u003ctr\u003e\\n \u003ctd\u003e\\n \u003cp\u003eNavigator NCS\u003c/p\u003e\\n \u003c/td\u003e\\n \u003ctd\u003e\\n \u003cp\u003e8.0-P06B and\\n later\u003c/p\u003e\\n \u003cp\u003e8.1-P06A and\\n later\u003c/p\u003e\\n \u003cp\u003e8.2-P07 and\\n later\u003c/p\u003e\\n \u003cp\u003e9.0-P05B and\\n later\u003c/p\u003e\\n \u003cp\u003e9.1-P05A and\\n later\u003c/p\u003e\\n \u003cp\u003e9.2-P02A and\\n later\u003c/p\u003e\\n \u003cp\u003e10.0-P01C and later\u003c/p\u003e\\n \u003c/td\u003e\\n \u003c/tr\u003e\\n\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.ciena.com/product-security\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.1\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Ciena Navigator Network\\nControl Suite (NCS) contains an information exposure vulnerability in an\\nevent-streaming API that does not properly enforce authentication. An\\nunauthenticated attacker with network access to the affected service could\\naccess the event stream and potentially obtain sensitive information.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eCiena Navigator Network\\nControl Suite (NCS) contains an information exposure vulnerability in an\\nevent-streaming API that does not properly enforce authentication. An\\nunauthenticated attacker with network access to the affected service could\\naccess the event stream and potentially obtain sensitive information.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-306\", \"description\": \"CWE-306 Missing authentication for critical function\"}]}], \"providerMetadata\": {\"orgId\": \"7bd90cf1-1651-495e-9ae8-9415fb3c9feb\", \"shortName\": \"Ciena\", \"dateUpdated\": \"2026-09-25T19:10:46.330Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-5267\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-25T20:40:31.039Z\", \"dateReserved\": \"2026-03-31T19:44:26.584Z\", \"assignerOrgId\": \"7bd90cf1-1651-495e-9ae8-9415fb3c9feb\", \"datePublished\": \"2026-09-25T19:10:46.330Z\", \"assignerShortName\": \"Ciena\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…