Improper Input Validation in Infinera MTC-9 Affects Network Reliability
CVE-2025-26489

6.5MEDIUM

Key Information:

Vendor

Infinera

Status
Mtc-9
Vendor
CVE Published:
8 December 2025

What is CVE-2025-26489?

An improper input validation vulnerability in Infinera's MTC-9 allows remote authenticated users to exploit the system by sending specially crafted XML payloads. This can lead to a Denial of Service condition, which may crash the service and force the appliance to reboot. The affected versions include MTC-9 R22.1.1.0275 and any versions before R23.0.

Affected Version(s)

MTC-9 R22.1.1.0275

References

https://www.cve.org/CVERecord?id=CVE-2025-26489

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-26489 : Improper Input Validation in Infinera MTC-9 Affects Network Reliability