CLI Deactivation Vulnerability in Infinera G42 WebGUI

CVE-2025-27026

What is CVE-2025-27026?

The Infinera G42 WebGUI contains a critical missing double-check feature that allows an authenticated administrator to deactivate the CLI, Linux Shell, WebGUI, and Physical Serial Console interfaces without confirmation. This vulnerability puts device administrators at risk by potentially leading to a complete loss of access to essential management interfaces, thereby compromising their ability to control the device. The deactivation process does not prompt for verification, increasing the risk of accidental or malicious lockout.

References