Skip to content
OpenAdvisories

Vendor

CIENA

4 known vulnerabilities.

Products

Navigator NCS 3 MCP 2 Planner Plus OnPrem 2 6500 S-Series 1 6500 T-Series 1 PTS 1 CPL 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-5269

    Navigator NCS and MCP System Accounts with Default Passwords

    In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limit…

    CIENA Navigator NCS MCP Planner Plus OnPrem
  • Critical 9.8
    CVE-2026-5270

    Authentication Bypass in Navigator and Blue Planet Products

    An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an …

    CIENA Blue Planet Navigator NCS MCP
  • Critical 9.1
    CVE-2026-5268

    SFTP Server Authentication Weakness

    An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlyi…

    CIENA 6500 T-Series CPL 6500 S-Series