VYPR
High severity7.5NVD Advisory· Published Dec 8, 2025· Updated Jun 17, 2026

CVE-2025-26488

CVE-2025-26488

Description

Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Infinera/MTC-9cpe-rescue2 versions
    R22.1.1.0275+ 1 more
    • (no CPE)range: R22.1.1.0275
    • (no CPE)range: R22.1.1.0275 <= version < R23.0
  • cpe:2.3:o:nokia:infinera_mtc-9_firmware:*:*:*:*:*:*:*:*
    Range: >=22.1.1.0275,<23.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.