AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

CienaCVE-2026-5269

Ciena MCP: privilege escalation

Ciena

CVE-2026-5269 · Published Jul 14, 2026 · updated Jul 15, 2026

Critical9.8
No fix yet
Ciena advisory

In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker could combine an attack using one of these accounts with other potential weaknesses to launch a more significant attack, possibly leading to escalation of privilege on the system.

Affected versions

PackageAffectedFixed in
MCP
Product
<= <= 8.0No fix yet
Navigator NCS
Product
<= 8.1No fix yet
Planner Plus OnPrem
Product
<= <= 4.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-1393

More Ciena advisories

All Ciena