CVE-2025-27019

Critical · 9.8

CVSS

9.8

EPSS

0.4%

Published

Dec 8, 2025

CISA due date

—

The record

Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0.

Affected packages

Ecosystem	Package	Introduced	Fixed