CVE-2025-26487: Infinera MTC-9 · Server-Side Request Forgery (SSRF)
Affects Infinera MTC-9Source CVE Database V5
Not known to be exploited · CVSS 8.6 High.
Data as of 26 Oct 2026, 06:26 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 27% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 8 Dec 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Infinera MTC-9 | Affected
| Fixed in– |
AI-suggested
1. Monitor Infinera’s official channels closely for security patches addressing CVE-2025-26487 and apply them immediately upon release. 2. Implement strict egress filtering on network devices to restrict outbound requests from the MTC-9 system to only trusted and necessary destinations, minimizing SSRF exploitation scope. 3. Use network segmentation to isolate management interfaces and internal services from the broader network, reducing accessible attack surface. 4. Employ Web Application Firewalls (WAFs) or intrusion detection/prevention systems (IDS/IPS) with SSRF detection capabilities to identify and block suspicious request patterns. 5. Conduct regular security assessments and penetration testing focused on SSRF and related vulnerabilities in telecom infrastructure. 6. Review and harden server-side request handling logic and input validation where possible, even if patches are not yet available. 7. Maintain comprehensive logging and monitoring to detect anomalous outbound requests originating from the MTC-9 system. 8. Coordinate with national cybersecurity agencies for threat intelligence sharing and incident response preparedness.
Description
Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge.