Skip to content

Product

CIENA MCP vulnerabilities

2 published CVES affecting CIENA MCP, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest CIENA MCP CVEs

Newest publication first

  1. CVE-2026-5269 Navigator NCS and MCP System Accounts with Default Passwords

    Published
    CriticalCVSS 9.8 EPSS 0.48%

    In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on the...

  2. CVE-2026-5270 Authentication Bypass in Navigator and Blue Planet Products

    Published
    CriticalCVSS 9.8 EPSS 0.66%

    An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.