Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-26487

Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ENISA

Description

Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Infinera MTC-9

Default version status: unaffected

  • R22.1.1.0275 to < R23.0affected

References