Vulnerability · Published Jun 30, 2026 · Assigned by Nokia
CVE-2025-24816An Improper Access Control vulnerability in Nokia MantaRay NM
Medium 6.5
In plain English
A medium-severity improper access control in MantaRay NM from Nokia. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 72.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nokia | MantaRay NM | <25R2-NM |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N