Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-26489 EUVD-2025-201681GHSA-q9m8-v6jr-whjw

Improper input validation in Netconf service in Infinera MTC-9

Published Dec 8, 2025 · Updated Dec 8, 2025 · Assigned by ENISA

Description

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and
reboot the appliance, thus causing a DoS condition, via crafted XML
payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.

Affected products

VendorProductAffectedFixed
Infinera MTC-9 R22.1.1.0275 – < R23.0 R23.0

References