CVE-2026-5268
SFTP Server Authentication Weakness
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.
CVSS 3.1 · 9.1 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products