Approved changes feed: RSS · Atom

cpe:2.3:a:ciena:navigator_ncs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCiena (ee79f975-abdb-5887-8095-79c01254355a)
ProductNavigator Ncs (03441a56-55ad-58f2-b0da-e765dac2922c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5270 vulnerable 2026-07-29 01:03:18.584823 Authentication Bypass in Navigator and Blue Planet Products
An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate requests in a manner that bypasses authentication and associated audit logging controls.
Published: 2026-07-14T22:24:34.750Z
Updated: 2026-07-15T12:39:32.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5269 vulnerable 2026-07-29 01:03:18.581415 Navigator NCS and MCP System Accounts with Default Passwords
In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker could combine an attack using one of these accounts with other potential weaknesses to launch a more significant attack, possibly leading to escalation of privilege on the system.
Published: 2026-07-14T22:25:55.317Z
Updated: 2026-07-15T14:30:50.769Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.