VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 8, 2025· Updated Jun 17, 2026

CVE-2025-26489

CVE-2025-26489

Description

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.

Affected products

3
  • Nokia/Infinera Mtc 9 Firmware
    cpe:2.3:o:nokia:infinera_mtc-9_firmware:*:*:*:*:*:*:*:*
    Range: >=22.1.1.0275,<23.0
  • Infinera/MTC-9llm-fuzzy2 versions
    R22.1.1.0275 <= R23.0+ 1 more
    • (no CPE)range: R22.1.1.0275 <= R23.0
    • (no CPE)range: R22.1.1.0275

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.