CVE-2026-5268

An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ciena.com/product-security

Configurations

No configuration.

History

06 Jul 2026, 19:17

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.1

06 Jul 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-07-06 16:16

Updated : 2026-07-08 21:16

NVD link : CVE-2026-5268

Mitre link : CVE-2026-5268

CVE.ORG link : CVE-2026-5268

JSON object : View

Products Affected

No product.

CWE

CWE-288

Authentication Bypass Using an Alternate Path or Channel

{"id": "CVE-2026-5268", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5268", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-06T18:42:35.509616Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb", "affectedData": [{"vendor": "CIENA", "product": "6500 S-Series", "versions": [{"status": "affected", "version": "R16.96 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "CIENA", "product": "6500 T-Series", "versions": [{"status": "affected", "version": "R16.1 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "CIENA", "product": "PTS", "versions": [{"status": "affected", "version": "R16.1 and prior"}], "defaultStatus": "unaffected"}, {"vendor": "CIENA", "product": "CPL", "versions": [{"status": "affected", "version": "R12.63 and prior"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-06T16:16:38.433", "references": [{"url": "https://www.ciena.com/product-security", "source": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb", "description": [{"lang": "en", "value": "CWE-288"}]}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability exists in\nthe default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass\nsecurity controls and gain unauthorized access to the underlying filesystem.\nSuccessful exploitation could allow an attacker to read or modify system files."}], "lastModified": "2026-07-08T21:16:54.663", "sourceIdentifier": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb"}