CVE-2026-5267 debrief based on the supplied source corpus. The CVE record was published on 2026-09-25T20:17:11.613Z and has not been modified since then. Ciena Navigator Network Control Suite (NCS) contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the e [truncated]
CVE-2026-5268 is a critical authentication bypass vulnerability in the default SFTP server component of certain Ciena products. Successful exploitation allows unauthorized access to the underlying filesystem, enabling attackers to read or modify system files. The vulnerability has a CVSS score of 9.1 and is considered CRITICAL. This vulnerability affects various Ciena products and allows remote, unauthent [truncated]
