Export limit exceeded: 11741 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 11741 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 11741 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (2 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-5270 2 Blue Planet, Ciena 7 Inventory, Orchestration, Route Optimization & Analysis and 4 more 2026-08-02 9.8 Critical
An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate requests in a manner that bypasses authentication and associated audit logging controls.
CVE-2026-5269 1 Ciena 3 Mcp, Navigator Ncs, Planner Plus Onprem 2026-08-02 9.8 Critical
In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker could combine an attack using one of these accounts with other potential weaknesses to launch a more significant attack, possibly leading to escalation of privilege on the system.