Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/25 8:17 p.m.•24 views

CVE-2026-5267

Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...

7.5CVSS0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 7:10 p.m.•21 views

CVE-2026-5267 Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS

Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...

5.8AI score0.0036EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 7:10 p.m.•35 views

CVE-2026-5267

The Ciena Navigator Network Control Suite (NCS) is affected by an information exposure vulnerability in its event-streaming API . The root cause is a failure to properly enforce authentication , which allows an unauthenticated attacker with network access to the affected service to access the eve...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 7:10 p.m.•25 views

EUVD-2026-87295

Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 7:10 p.m.•44 views

CVE-2026-5267 Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS

Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...

0.0036EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•15 views

CVE-2026-5267: Missing Authentication for Critical Function

Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...

7.5CVSS5.9AI score0.0036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•16 views

PT-2026-99097

Name of the Vulnerable Software and Affected Versions Ciena Navigator Network Control Suite NCS affected versions not specified Description An information exposure issue exists in an event-streaming API that fails to properly enforce authentication. An unauthenticated attacker with network access...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References7
Rows per page
Query Builder