What is the CVSS score of EUVD-2026-44573?

EUVD-2026-44573 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Ciena Navigator NCS are affected by EUVD-2026-44573?

Ciena's network control and orchestration suite (Navigator NCS 8.1, MCP ≤8.0, Blue Planet) contains a CRITICAL authentication bypass allowing any network attacker to seize administrative control of…

How to fix or mitigate EUVD-2026-44573?

Within 24 hours, identify all affected Ciena Navigator NCS 8.1, MCP ≤8.0, and Blue Planet implementations and immediately restrict network access to management interfaces using firewall rules and network segmentation to trusted networks only. Within 7 days, implement enhanced monitoring and anomaly detection on management traffic, consult Ciena's security advisory for any available workarounds, and isolate critical Blue Planet components if feasible. Within 30 days, coordinate with Ciena for patch timeline and ETA, prepare upgrade procedures for all affected systems, and evaluate service rerouting options if required pending patch availability.

Ciena Navigator NCS EUVD-2026-44573

| CVE-2026-5270 CRITICAL

Improper Authentication (CWE-287)

2026-07-14 7bd90cf1-1651-495e-9ae8-9415fb3c9feb

GHSA-rp4h-q5qj-wrcr

Authentication Bypass

9.8

CVSS 3.1 · Vendor: 7bd90cf1-1651-495e-9ae8-9415fb3c9feb

Severity by source

Vendor (7bd90cf1-1651-495e-9ae8-9415fb3c9feb) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

9.8 CRITICAL

A single crafted HTTP request over the network with no auth or interaction (AV:N/AC:L/PR:N/UI:N) yields full management access, so C:H/I:H/A:H.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (7bd90cf1-1651-495e-9ae8-9415fb3c9feb).

CVSS VectorVendor: 7bd90cf1-1651-495e-9ae8-9415fb3c9feb

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 15, 2026 - 13:24 vuln.today

CVSS changed

Jul 15, 2026 - 13:22 NVD

9.8 (CRITICAL)

CVE Published

Jul 14, 2026 - 23:17 cve.org

CRITICAL 9.8

CVE Published

Jul 14, 2026 - 23:17 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate requests in a manner that bypasses authentication and associated audit logging controls.

AnalysisAI

Authentication bypass in Ciena Navigator Network Control Suite (NCS 8.1), Manage Control Plane (MCP ≤ 8.0), and Blue Planet components (Inventory, Orchestration, Route Optimization & Analysis, Unified Assurance & Analytics, Planner Plus) allows an unauthenticated network attacker to manipulate HTTP request paths and headers to reach protected functionality while also evading audit logging. Rated CVSS 9.8 with a fully remote, low-complexity, no-interaction vector, this flaw hands attackers administrative-level access to carrier-grade network control and orchestration platforms. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the trivial exploitation profile makes it a high-priority patch for affected operators.

Technical ContextAI

The affected products are Ciena's telecom/service-provider network management and orchestration stack: Navigator NCS and MCP provide multi-domain and control-plane management, while Blue Planet supplies inventory, orchestration, route optimization/analysis, and assurance/analytics microservices. The root cause is classified as CWE-287 (Improper Authentication): the web tier improperly normalizes or parses HTTP request paths and headers, so a crafted request can be routed to an authenticated endpoint without the authentication middleware recognizing it as a protected resource. This class of path/header-handling bypass commonly stems from inconsistent URL canonicalization between a front-end proxy/router and the back-end authorization filter (e.g., trailing slashes, path-traversal segments, case, or duplicate/override headers), which here also causes the request to slip past audit logging controls, reducing forensic visibility.

RemediationAI

Patch available per vendor advisory: consult Ciena's Product Security portal (https://www.ciena.com/product-security) for the fixed releases - the EUVD version ranges use '≤' notation, indicating remediation is delivered in releases above each listed threshold (e.g., MCP above 8.0, Navigator NCS above 8.1, and the corresponding higher Blue Planet Inventory/Orchestration/ROA/UAA/Planner Plus builds); apply the vendor-supplied upgrade for your specific module and train. No exact independently confirmed fix version is present in the input, so verify the precise target build directly with Ciena support before upgrading. Until patched, restrict network reachability of the management/web interfaces to trusted operations networks and jump hosts only, place them behind a VPN or bastion, and where a fronting reverse proxy or WAF is available, enforce strict URL canonicalization and normalize/strip ambiguous or duplicated HTTP headers to blunt path/header manipulation - noting that aggressive normalization rules can break legitimate API calls and should be tested first. Increase host and network-layer monitoring, since the flaw can evade the application's own audit logging.