« Back to list

Ciena

Ciena Manage Control Plan: vulnerabilities and CVEs

Ciena Manage Control Plan has 2 published vulnerabilities, 2 of them in the last 12 months. 2 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical2
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-5270Critical (9.8)0.66%—Jul 14, 2026
An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP…
CVE-2026-5269Critical (9.8)0.48%—Jul 14, 2026
In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1190 Exploit Public-Facing Application2
  2. T1078 Valid Accounts1
  3. T1078.001 Default Accounts1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Ciena