CVE-2025-26489

Name of the Vulnerable Software and Affected Versions Infinera MTC-9 versions R22.1.1.0275 through R23.0

Description A flaw exists in the Netconf service of Infinera MTC-9 that allows remotely authenticated users to cause a denial-of-service (DoS) condition. This is achieved by sending specially crafted XML payloads, which can crash the service and reboot the appliance. The issue stems from improper input validation.

Recommendations Update to a version after R23.0.