123 matches found
CVE-2026-5267
Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...
CVE-2026-5267 Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS
Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...
CVE-2026-5267 Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS
Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...
EUVD-2026-87295
Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...
CVE-2026-5267
The Ciena Navigator Network Control Suite (NCS) is affected by an information exposure vulnerability in its event-streaming API . The root cause is a failure to properly enforce authentication , which allows an unauthenticated attacker with network access to the affected service to access the eve...
PT-2026-99097
Name of the Vulnerable Software and Affected Versions Ciena Navigator Network Control Suite NCS affected versions not specified Description An information exposure issue exists in an event-streaming API that fails to properly enforce authentication. An unauthenticated attacker with network access...
CVE-2026-5269: Use of Default Password
In Ciena's Navigator Network Control Suite NCS and Manage Control Plan MCP, there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker...
CVE-2026-20118
A vulnerability in the handling of an Egress Packet Network Interface EPNI Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series with NC57 line cards and Cisco NCS 5700 Routers and Cisco IOS XR Software for Third Party Software could allow an...
EUVD-2026-11224
A vulnerability in the handling of an Egress Packet Network Interface EPNI Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series with NC57 line cards and Cisco NCS 5700 Routers and Cisco IOS XR Software for Third Party Software could allow an...
CVE-2026-20118: Improper Cleanup on Thrown Exception
A vulnerability in the handling of an Egress Packet Network Interface EPNI Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series with NC57 line cards and Cisco NCS 5700 Routers and Cisco IOS XR Software for Third Party Software could allow an...
EUVD-2015-0631
Malware in sbrugna...
EUVD-2017-3843
Malware in sbrugna...
EUVD-2016-2532
Malware in sbrugna...
EUVD-2016-2525
Malware in sbrugna...
EUVD-2021-21358
Malware in sbrugna...
EUVD-2017-15720
Malware in sbrugna...
EUVD-2021-6603
Malicious code in bioql PyPI...
EUVD-2022-26095
Malicious code in bioql PyPI...
CVE-2023-49564
The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid...
CVE-2023-49564 Authentication Bypass
The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid...