CVE-2026-5270

9.8 Critique

Publiée le 15/07/2026 à 01:17 · Modifiée le 15/07/2026 à 22:08 · En attente d'analyse NVD · Source : 7bd90cf1-1651-495e-9ae8-9415fb3c9feb

Description

An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate requests in a manner that bypasses authentication and associated audit logging controls.

Traduire en français

Produits concernés

CIENA Navigator NCS
CIENA MCP
CIENA Planner Plus OnPrem
Blue Planet Inventory
Blue Planet Orchestration
Blue Planet Route Optimization & Analysis
Blue Planet Unified Assurance & Analytics

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-287

Références

https://www.ciena.com/product-security

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories