Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and
reboot the appliance, thus causing a DoS condition, via crafted XML
payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
References
| Link | Resource |
|---|---|
| https://www.cve.org/CVERecord?id=CVE-2025-26489 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 Dec 2025, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nokia
Nokia infinera Mtc-9 Nokia infinera Mtc-9 Firmware |
|
| References | () https://www.cve.org/CVERecord?id=CVE-2025-26489 - Third Party Advisory | |
| CPE | cpe:2.3:h:nokia:infinera_mtc-9:-:*:*:*:*:*:*:* cpe:2.3:o:nokia:infinera_mtc-9_firmware:*:*:*:*:*:*:*:* |
08 Dec 2025, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0. |
08 Dec 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-08 09:15
Updated : 2025-12-22 18:55
NVD link : CVE-2025-26489
Mitre link : CVE-2025-26489
CVE.ORG link : CVE-2025-26489
JSON object : View
Products Affected
nokia
- infinera_mtc-9_firmware
- infinera_mtc-9
CWE
CWE-20
Improper Input Validation