Skip to content
OpenAdvisories
High · 8.6 CVE-2025-26487 EUVD-2025-201685GHSA-fj7m-xhjx-6rw6

Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9

Published Dec 8, 2025 · Updated Dec 8, 2025 · Assigned by ENISA

Description

Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows
remote unauthenticated users to gain access to other network resources
using HTTPS requests through the appliance used as a bridge.

Affected products

VendorProductAffectedFixed
Infinera MTC-9 R22.1.1.0275 – < R23.0 R23.0

References