Improper Input Validation in Infinera MTC-9 Affects Service Stability

CVE-2025-26488

What is CVE-2025-26488?

The Infinera MTC-9 product suffers from an improper input validation flaw that enables remote unauthenticated attackers to exploit crafted XML payloads. This vulnerability can lead to a denial of service (DoS) condition by crashing the service and triggering a reboot of the appliance. Such instability can significantly affect the operational efficiency and reliability of the impacted systems. It is crucial for users operating MTC-9 versions below R23.0 to implement appropriate mitigations to safeguard their services.

References