Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-5268— SFTP Server Authentication Weakness

Quick assessment

Affected
CIENA 6500 S-Series
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Ciena 6500 S-Series是Ciena公司的一款网络交换设备。 Ciena 6500 S-Series、6500 T-Series、PTS和CPL存在授权问题漏洞，该漏洞源于默认SFTP服务器组件存在认证绕过问题，可能导致远程未经过身份验证的攻击者绕过安全控制并获得对底层文件系统的未授权访问，从而读取或修改系统文件。以下版本受到影响：6500 S-Series R16.96及之前版本、6500 T-Series R16.1及之前版本、PTS R16.1及之前版本和CPL R12.63及之前版本

AI Predicted 9.8 Difficulty: Easy EPSS 0.66% · P50

Affected Version Matrix 4

VendorProduct Version RangeStatus
CIENA 6500 S-Series R16.96 and prior affected
CIENA 6500 T-Series R16.1 and prior affected
CIENA CPL R12.63 and prior affected
CIENA PTS R16.1 and prior affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-5268

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
SFTP Server Authentication Weakness
Source: CVE Program / CVE List V5
Vulnerability Description
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
使用候选路径或通道进行的认证绕过
Source: CVE Program / CVE List V5
Vulnerability Title
Ciena 6500 S-Series 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ciena 6500 S-Series是Ciena公司的一款网络交换设备。 Ciena 6500 S-Series、6500 T-Series、PTS和CPL存在授权问题漏洞，该漏洞源于默认SFTP服务器组件存在认证绕过问题，可能导致远程未经过身份验证的攻击者绕过安全控制并获得对底层文件系统的未授权访问，从而读取或修改系统文件。以下版本受到影响：6500 S-Series R16.96及之前版本、6500 T-Series R16.1及之前版本、PTS R16.1及之前版本和CPL R12.63及之前版本
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
CIENA 6500 S-Series R16.96 and prior -
CIENA 6500 T-Series R16.1 and prior -
CIENA PTS R16.1 and prior -
CIENA CPL R12.63 and prior -

II. Public POCs for CVE-2026-5268

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-5268

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same vendor: CIENA
Same weakness: CWE-288

V. Comments for CVE-2026-5268

No comments yet

Leave a comment