Is CVE-2026-5267 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-5267?

CVE-2026-5267 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-5267

Description

Ciena Navigator Network Control Suite (NCS) contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive information.