Nokia

Latest CVEs · RSS

• CVE-2026-40465 2026-08-31
  NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.
• CVE-2026-40464 2026-08-31
  NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with
• CVE-2026-40463 2026-08-31
  WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated l
• CVE-2025-7406 2026-06-30
  Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escal
• CVE-2025-24816 2026-06-30
  Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an a
• CVE-2025-24815 2026-06-30
  Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authe
• CVE-2025-9912 2026-06-16
  Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to exe
• CVE-2025-10262 2026-06-16
  Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may
• CVE-2025-24819 2026-04-07
  Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager
• CVE-2025-24818 2026-04-07
  Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Log Search
• CVE-2025-24817 2026-04-07
  Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Col
• CVE-2025-10258 2026-02-05
  Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive informatio
• CVE-2025-9974 2026-02-02
  The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level comman
• CVE-2025-0980 2026-01-07
  Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation all
• CVE-2023-49565 2025-09-18
  The cbis_manager Podman container is vulnerable to remote command execution via the /api/plugins endpoint. Improper sanitization of the HTTP Headers X-FILENAME,
• CVE-2023-49564 2025-09-18
  The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized ac
• CVE-2025-24938 2025-07-21
  The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high privileged access (admi
• CVE-2025-24937 2025-07-21
  File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading to a full compromise
• CVE-2025-24936 2025-07-21
  The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the netw
• CVE-2025-24335 2025-07-02
  Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used
• CVE-2025-24334 2025-07-02
  The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST requ
• CVE-2025-24333 2025-07-02
  Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell input validation fault, which authenticated admin user can, in theo
• CVE-2025-24332 2025-07-02
  Nokia Single RAN AirScale baseband allows an authenticated administrative user access to all physical boards after performing a single login to the baseband sys
• CVE-2025-24331 2025-07-02
  The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabil
• CVE-2025-24330 2025-07-02
  Sending a crafted SOAP "provision" operation message PlanId field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management networ