CVE-2026-5269— Navigator NCS and MCP System Accounts with Default Passwords

Navigator NCS and MCP System Accounts with Default Passwords

In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker could combine an attack using one of these accounts with other potential weaknesses to launch a more significant attack, possibly leading to escalation of privilege on the system.

N/A

CWE-1393

Ciena Navigator NCS 信任管理问题漏洞

Ciena Navigator NCS是Ciena公司的一款网络设备的专用管理与配置工具。 Ciena Navigator NCS 8.1版本、Ciena MCP 8.0及之前版本和Ciena Planner Plus OnPrem 4.1及之前版本存在信任管理问题漏洞，该漏洞源于存在具有默认密码的隐藏系统账户，可能与服务器端的其他弱点结合，导致权限提升。

N/A

N/A