CVE-2026-5267

HIGHCVSS 7.5

Description

Ciena Navigator Network Control Suite (NCS) contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive information.

Timeline

Published:September 25th, 2026 8:17 PM

Last modified:September 28th, 2026 4:31 PM

CVSS Scoring

CVSS v3: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-306

References & Reports

Advisories, patches, and third-party reports

https://www.ciena.com/product-security

Source: NIST NVD · Data may lag official sources by up to one minute