# cve.now: Nokia

The newest entries naming Nokia as an affected vendor (up to 200), of 34 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-34485](https://cve.now/CVE-2026-34485.md): A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX) (CVSS 7.8)
- [CVE-2026-34484](https://cve.now/CVE-2026-34484.md): A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX) (CVSS 6.7)
- [CVE-2026-40465](https://cve.now/CVE-2026-40465.md): An Open Re-direct Vulnerability in Nokia NSP (CVSS 5.3)
- [CVE-2026-40464](https://cve.now/CVE-2026-40464.md): A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP (CVSS 5.4)
- [CVE-2026-40463](https://cve.now/CVE-2026-40463.md): An Insufficient Role-based Access Control Vulnerability in WaveSuite (CVSS 7.6)
- [CVE-2025-7406](https://cve.now/CVE-2025-7406.md): A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM (CVSS 7.8)
- [CVE-2025-24816](https://cve.now/CVE-2025-24816.md): An Improper Access Control vulnerability in Nokia MantaRay NM (CVSS 6.5)
- [CVE-2025-24815](https://cve.now/CVE-2025-24815.md): An unrestricted file upload vulnerability in Nokia MantaRay NM (CVSS 7.8)
- [CVE-2025-9912](https://cve.now/CVE-2025-9912.md): A local privilege escalation vulnerability in Nokia SR Linux (CVSS 6.3)
- [CVE-2025-10262](https://cve.now/CVE-2025-10262.md): An unsanitized format validation vulnerability in Nokia SR Linux (CVSS 6.3)
- [CVE-2025-24819](https://cve.now/CVE-2025-24819.md): A Relative Path Traversal vulnerability in Nokia MantaRay NM (CVSS 5.7)
- [CVE-2025-24818](https://cve.now/CVE-2025-24818.md): An OS Command Injection vulnerability in Nokia MantaRay NM (CVSS 8.0)
- [CVE-2025-24817](https://cve.now/CVE-2025-24817.md): An OS Command Injection vulnerability in Nokia MantaRay NM (CVSS 8.0)
- [CVE-2025-10258](https://cve.now/CVE-2025-10258.md): A time-based SQL Injection vulnerability in Infinera DNA (CVSS 6.3)
- [CVE-2025-9974](https://cve.now/CVE-2025-9974.md): Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product (CVSS 8.0)
- [CVE-2025-0980](https://cve.now/CVE-2025-0980.md): JSON RPC authentication bypass in Nokia SR Linux (CVSS 6.4)
- [CVE-2023-49565](https://cve.now/CVE-2023-49565.md): Remote Code Execution (CVSS 8.4)
- [CVE-2023-49564](https://cve.now/CVE-2023-49564.md): Authentication Bypass (CVSS 8.8)
- [CVE-2025-24938](https://cve.now/CVE-2025-24938.md): Insufficient Validation of Input while user creation (CVSS 8.4)
- [CVE-2025-24937](https://cve.now/CVE-2025-24937.md): Access to local file system and its content (CVSS 9.0)
- [CVE-2025-24936](https://cve.now/CVE-2025-24936.md): Insufficient Validation of Input in the URL (CVSS 9.0)
- [CVE-2025-24335](https://cve.now/CVE-2025-24335.md): SOAP message input validation fault could in theory cause OAM service resource exhaustion (CVSS 2.0)
- [CVE-2025-24334](https://cve.now/CVE-2025-24334.md): The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network (CVSS 3.3)
- [CVE-2025-24333](https://cve.now/CVE-2025-24333.md): Administrative user shell input validation fault (CVSS 6.4)
- [CVE-2025-24332](https://cve.now/CVE-2025-24332.md): Authenticated admin user can connect baseband internally from one board to another without needing to re-authentication (CVSS 7.1)
- [CVE-2025-24331](https://cve.now/CVE-2025-24331.md): Nokia Single RAN baseband OAM service extensive capabilities (CVSS 6.4)
- [CVE-2025-24330](https://cve.now/CVE-2025-24330.md): OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management network (CVSS 6.4)
- [CVE-2025-24329](https://cve.now/CVE-2025-24329.md): OAM service path traversal issue caused by a crafted SOAP message archive field within the RAN management network (CVSS 6.4)
- [CVE-2025-24328](https://cve.now/CVE-2025-24328.md): OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network (CVSS 4.2)
- [CVE-2023-6729](https://cve.now/CVE-2023-6729.md): Nokia SR OS: File Access Security Vulnerability (CVSS 7.3)
- [CVE-2023-6728](https://cve.now/CVE-2023-6728.md): Nokia SR OS: BOF File Encryption Vulnerability (CVSS 3.3)
- [CVE-2022-2484](https://cve.now/CVE-2022-2484.md): The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified fir (CVSS 8.4)
- [CVE-2022-2483](https://cve.now/CVE-2022-2483.md): The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification (CVSS 8.4)
- [CVE-2022-2482](https://cve.now/CVE-2022-2482.md): A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place (CVSS 8.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/nokia
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.