Vulnerability Details CVE-2025-26488
Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a
reboot of the appliance, thus causing a DoS condition, via crafted XML
payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.6%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2025-26488
-
cpe:2.3:h:nokia:infinera_mtc-9:-
-
cpe:2.3:o:nokia:infinera_mtc-9_firmware:*