CVE-2026-5268
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
An authentication bypass vulnerability in the default SFTP server used across Ciena products allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow reading or modifying system files.
Risk Assessment
The risk includes full compromise of data confidentiality and integrity on Ciena systems, potentially leading to sensitive information leakage or network disruption.
Recommendation
Immediately apply the vendor-supplied patch for the vulnerable SFTP server and restrict network access to this component to trusted hosts only.
Original NVD description (English source)
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.