MCP vulnerabilities

2 known vulnerabilities in MCP from CIENA. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Navigator NCS: Improper Authentication

  CVE-2026-5270Jul 14, 2026CIENA

  An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an u

• 9.8 Critical severity

  Navigator NCS: Use of Default Password

  CVE-2026-5269Jul 14, 2026CIENA

  In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limite