Nokia vulnerabilities
34 CVEs and advisories name Nokia as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-34485A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
- CVE-2026-34484A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)
- CVE-2026-40465An Open Re-direct Vulnerability in Nokia NSP
- CVE-2026-40464A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP
- CVE-2026-40463An Insufficient Role-based Access Control Vulnerability in WaveSuite
- CVE-2025-7406A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM
- CVE-2025-24816An Improper Access Control vulnerability in Nokia MantaRay NM
- CVE-2025-24815An unrestricted file upload vulnerability in Nokia MantaRay NM
- CVE-2025-9912A local privilege escalation vulnerability in Nokia SR Linux
- CVE-2025-10262An unsanitized format validation vulnerability in Nokia SR Linux
- CVE-2025-24819A Relative Path Traversal vulnerability in Nokia MantaRay NM
- CVE-2025-24818An OS Command Injection vulnerability in Nokia MantaRay NM
- CVE-2025-24817An OS Command Injection vulnerability in Nokia MantaRay NM
- CVE-2025-10258A time-based SQL Injection vulnerability in Infinera DNA
- CVE-2025-9974Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product
- CVE-2025-0980JSON RPC authentication bypass in Nokia SR Linux
- CVE-2023-49565Remote Code Execution
- CVE-2023-49564Authentication Bypass
- CVE-2025-24938Insufficient Validation of Input while user creation
- CVE-2025-24937Access to local file system and its content
- CVE-2025-24936Insufficient Validation of Input in the URL
- CVE-2025-24335SOAP message input validation fault could in theory cause OAM service resource exhaustion
- CVE-2025-24334The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network
- CVE-2025-24333Administrative user shell input validation fault
- CVE-2025-24332Authenticated admin user can connect baseband internally from one board to another without needing to re-authentication
- CVE-2025-24331Nokia Single RAN baseband OAM service extensive capabilities
- CVE-2025-24330OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management network
- CVE-2025-24329OAM service path traversal issue caused by a crafted SOAP message archive field within the RAN management network
- CVE-2025-24328OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network
- CVE-2023-6729Nokia SR OS: File Access Security Vulnerability