CVE-2026-52673

MediumCVSS 6.5/10Last modified Jul 5, 2026

Related CVEs from 2026

CVE-2026-52689.1An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerabiCVE-2026-526809.8Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. CVE-2026-526813.1Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedlyCVE-2026-526843.7If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happCVE-2026-526863.7The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when CVE-2026-526876.5An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression state requires a largeCVE-2026-526887.5RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validationCVE-2026-52699.8In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software CVE-2026-526905.9Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records servedCVE-2026-526918.8** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ApacheCVE-2026-526927.5Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.CVE-2026-526939.3Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.
CVE-2026-52673: Medium severity, CVSS 6.5 | Vulnix