https://vulnogram.org/ Most recent CVEs assigned by Ciena Corporation (ciena). https://vulnogram.org/seaview/icons/ciena.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-5267 https://vulnogram.org/CVE-2026-5267 Ciena Navigator Network Control Suite (NCS) contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access t… High Network Exploitable Fri, 25 Sep 2026 19:10:46 GMT https://vulnogram.org/CVE-2026-5269 https://vulnogram.org/CVE-2026-5269 In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have v… Critical Network Exploitable Tue, 14 Jul 2026 22:25:55 GMT https://vulnogram.org/CVE-2026-5270 https://vulnogram.org/CVE-2026-5270 An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which a… Critical Network Exploitable Tue, 14 Jul 2026 22:24:34 GMT https://vulnogram.org/CVE-2026-5268 https://vulnogram.org/CVE-2026-5268 An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the… Critical Network Exploitable Mon, 06 Jul 2026 15:25:56 GMT https://vulnogram.org/CVE-2024-2005 https://vulnogram.org/CVE-2024-2005 In Blue Planet® products through 22.12, a misconfiguration in the SAML implementation allows for privilege escalation. Only products using SAML authentication are affected. Blue Planet® has released software updates that address this vulnerability fo… Critical Tue, 05 Mar 2024 18:54:00 GMT