CVE-2026-5268 - Vulnerability Details - OpenCVE

An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Ciena	6500 S-series 6500 T-series Cpl Pts

No data.

No data.

References

Link	Providers
https://www.ciena.com/product-security

History

Mon, 06 Jul 2026 23:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ciena Ciena 6500 S-series Ciena 6500 T-series Ciena cpl Ciena pts
Vendors & Products		Ciena Ciena 6500 S-series Ciena 6500 T-series Ciena cpl Ciena pts

Mon, 06 Jul 2026 19:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 06 Jul 2026 15:45:00 +0000

Type	Values Removed	Values Added
Description		An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.
Title		SFTP Server Authentication Weakness
Weaknesses		CWE-288
References		https://www.ciena.com/product-security

MITRE

Status: PUBLISHED

Assigner: Ciena

Published: 2026-07-06T15:25:56.938Z

Updated: 2026-07-06T18:42:39.325Z

Reserved: 2026-03-31T19:44:32.296Z

Link: CVE-2026-5268

Vulnrichment

Updated: 2026-07-06T18:42:28.543Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5268", "assignerOrgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb", "state": "PUBLISHED", "assignerShortName": "Ciena", "dateReserved": "2026-03-31T19:44:32.296Z", "datePublished": "2026-07-06T15:25:56.938Z", "dateUpdated": "2026-07-06T18:42:39.325Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb", "shortName": "Ciena", "dateUpdated": "2026-07-06T15:25:56.938Z"}, "title": "SFTP Server Authentication Weakness", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-288", "description": "CWE-288 Authentication bypass using an alternate path or channel", "type": "CWE"}]}], "affected": [{"vendor": "CIENA", "product": "6500 S-Series", "versions": [{"status": "affected", "version": "R16.96 and prior"}], "defaultStatus": "affected"}, {"vendor": "CIENA", "product": "6500 T-Series", "versions": [{"status": "affected", "version": "R16.1 and prior"}], "defaultStatus": "affected"}, {"vendor": "CIENA", "product": "PTS", "versions": [{"status": "affected", "version": "R16.1 and prior"}], "defaultStatus": "affected"}, {"vendor": "CIENA", "product": "CPL", "versions": [{"status": "affected", "version": "R12.63 and prior"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability exists in\nthe default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass\nsecurity controls and gain unauthorized access to the underlying filesystem.\nSuccessful exploitation could allow an attacker to read or modify system files.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An authentication bypass vulnerability exists in\nthe default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass\nsecurity controls and gain unauthorized access to the underlying filesystem.\nSuccessful exploitation could allow an attacker to read or modify system files.</p>"}]}], "references": [{"url": "https://www.ciena.com/product-security", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-07-06T18:42:35.509616Z", "id": "CVE-2026-5268", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-06T18:42:39.325Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-5268", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-06T18:42:35.509616Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-06T18:42:28.543Z"}}], "cna": {"title": "SFTP Server Authentication Weakness", "affected": [{"vendor": "CIENA", "product": "6500 S-Series", "versions": [{"status": "affected", "version": "R16.96 and prior"}], "defaultStatus": "affected"}, {"vendor": "CIENA", "product": "6500 T-Series", "versions": [{"status": "affected", "version": "R16.1 and prior"}], "defaultStatus": "affected"}, {"vendor": "CIENA", "product": "PTS", "versions": [{"status": "affected", "version": "R16.1 and prior"}], "defaultStatus": "affected"}, {"vendor": "CIENA", "product": "CPL", "versions": [{"status": "affected", "version": "R12.63 and prior"}], "defaultStatus": "affected"}], "references": [{"url": "https://www.ciena.com/product-security", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability exists in\nthe default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass\nsecurity controls and gain unauthorized access to the underlying filesystem.\nSuccessful exploitation could allow an attacker to read or modify system files.", "supportingMedia": [{"type": "text/html", "value": "<p>An authentication bypass vulnerability exists in\nthe default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass\nsecurity controls and gain unauthorized access to the underlying filesystem.\nSuccessful exploitation could allow an attacker to read or modify system files.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-288", "description": "CWE-288 Authentication bypass using an alternate path or channel"}]}], "providerMetadata": {"orgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb", "shortName": "Ciena", "dateUpdated": "2026-07-06T15:25:56.938Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5268", "state": "PUBLISHED", "dateUpdated": "2026-07-06T18:42:39.325Z", "dateReserved": "2026-03-31T19:44:32.296Z", "assignerOrgId": "7bd90cf1-1651-495e-9ae8-9415fb3c9feb", "datePublished": "2026-07-06T15:25:56.938Z", "assignerShortName": "Ciena"}, "dataVersion": "5.2"}