Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-26487

Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9

Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Infinera Nokia
Products
Mtc-9 Infinera Mtc-9 Infinera Mtc-9 Firmware
CVE-2025-26488

Improper input validation in XML Management service in Infinera MTC-9

Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Infinera Nokia
Products
Mtc-9 Infinera Mtc-9 Infinera Mtc-9 Firmware
CVE-2025-26489

Improper input validation in Netconf service in Infinera MTC-9

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Infinera Nokia
Products
Mtc-9 Infinera Mtc-9 Infinera Mtc-9 Firmware
CVE-2025-27019

Remote shell service (RSH) in Infinera MTC-9

Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Infinera Nokia
Products
Mtc-9 Infinera Mtc-9 Infinera Mtc-9 Firmware
CVE-2025-27020

Improper configuration of SSH service in Infinera MTC-9

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Infinera Nokia
Products
Mtc-9 Infinera Mtc-9 Infinera Mtc-9 Firmware