Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-10258 EUVD-2025-206874GHSA-vfmp-7mg9-25v9

A time-based SQL Injection vulnerability in Infinera DNA

Published Feb 5, 2026 · Updated Feb 26, 2026 · Assigned by Nokia

Description

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information.

Affected products

VendorProductAffectedFixed
Nokia Infinera DNA Earlier than R24.2 R24.2 and later

References