CVE-2025-26487

Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9 PUBLISHED

Description (CNA)

Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge.

Affected (CNA)

Vendor / product	Versions
Infinera / MTC-9	affected R22.1.1.0275 before R23.0

CWE

CWE-918

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2025-26487

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.