Log in Start free

Nokia

Products

ProductCVEsExploitedLatest
Nokia Single RAN7–Jul 2, 2025
MantaRay NM6–Jun 30, 2026
ASIK AirScale 3–Jan 6, 2023
WaveSuite NOC3–Jul 21, 2025
Nokia 1830 Global Express (GX)2–Oct 20, 2026
CBIS,NCS2–Sep 18, 2025
NSP2–Aug 31, 2026
SR Linux2–Jun 16, 2026
SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS2–Oct 17, 2024
Infinera DNA1–Feb 5, 2026
Nokia ONT1–Feb 2, 2026
WaveSuite1–Aug 31, 2026
Nokia Single RAN AirScale (Flexi Multiradio is not affected)1–Jul 2, 2025
Nokia SR Linux1–Jun 16, 2026

Exploited and recent CVEs

  • CVE-2026-34485 High 7.8 A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX) 0.2%
  • CVE-2026-34484 Medium 6.7 A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX) 0.1%
  • CVE-2026-40465 Medium 5.3 An Open Re-direct Vulnerability in Nokia NSP 0.3%
  • CVE-2026-40464 Medium 5.4 A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP 0.2%
  • CVE-2026-40463 High 7.6 An Insufficient Role-based Access Control Vulnerability in WaveSuite 0.3%
  • CVE-2025-7406 High 7.8 A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM 0.1%
  • CVE-2025-24816 Medium 6.5 An Improper Access Control vulnerability in Nokia MantaRay NM 0.3%
  • CVE-2025-24815 High 7.8 An unrestricted file upload vulnerability in Nokia MantaRay NM 0.2%
  • CVE-2025-9912 Medium 6.3 A local privilege escalation vulnerability in Nokia SR Linux 0.1%
  • CVE-2025-10262 Medium 6.3 An unsanitized format validation vulnerability in Nokia SR Linux 0.1%
  • CVE-2025-24819 Medium 5.7 A Relative Path Traversal vulnerability in Nokia MantaRay NM 0.2%
  • CVE-2025-24818 High 8.0 An OS Command Injection vulnerability in Nokia MantaRay NM 1.1%
  • CVE-2025-24817 High 8.0 An OS Command Injection vulnerability in Nokia MantaRay NM 1.1%
  • CVE-2025-10258 Medium 6.3 A time-based SQL Injection vulnerability in Infinera DNA 0.3%
  • CVE-2025-9974 High 8.0 Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product 0.4%
  • CVE-2025-0980 Medium 6.4 JSON RPC authentication bypass in Nokia SR Linux 0.2%
  • CVE-2023-49565 High 8.4 Remote Code Execution 0.8%
  • CVE-2023-49564 High 8.8 Authentication Bypass 0.4%
  • CVE-2025-24938 High 8.4 Insufficient Validation of Input while user creation 0.3%
  • CVE-2025-24937 Critical 9.0 Access to local file system and its content 0.3%
  • CVE-2025-24936 Critical 9.0 Insufficient Validation of Input in the URL 0.4%
  • CVE-2025-24335 Low 2.0 SOAP message input validation fault could in theory cause OAM service resource exhaustion 0.5%
  • CVE-2025-24334 Low 3.3 The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network 0.1%
  • CVE-2025-24333 Medium 6.4 Administrative user shell input validation fault 0.2%
  • CVE-2025-24332 High 7.1 Authenticated admin user can connect baseband internally from one board to another without needing to re-authentication 0.2%
  • CVE-2025-24331 Medium 6.4 Nokia Single RAN baseband OAM service extensive capabilities 0.2%
  • CVE-2025-24330 Medium 6.4 OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management network 0.3%
  • CVE-2025-24329 Medium 6.4 OAM service path traversal issue caused by a crafted SOAP message archive field within the RAN management network 0.3%
  • CVE-2025-24328 Medium 4.2 OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network 0.2%
  • CVE-2023-6729 High 7.3 Nokia SR OS: File Access Security Vulnerability 0.1%