AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

CienaCVE-2026-5268

Ciena 6500 S-Series: authentication bypass

Ciena

CVE-2026-5268 · Published Jul 6, 2026 · updated Jul 8, 2026

Critical9.1
No fix yet
Ciena advisory

An authentication bypass vulnerability exists in

the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass

security controls and gain unauthorized access to the underlying filesystem.

Successful exploitation could allow an attacker to read or modify system files.

Affected versions

PackageAffectedFixed in
6500 S-Series
Product
<= R16.96 and priorNo fix yet
6500 T-Series
Product
<= R16.1 and priorNo fix yet
CPL
Product
<= R12.63 and priorNo fix yet
PTS
Product
<= R16.1 and priorNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-288

More Ciena advisories

All Ciena