{"id":"CVE-2025-10262","aliases":["EUVD-2025-210164","GHSA-h3gf-qq8m-r4r7"],"status":"published","title":"An unsanitized format validation vulnerability in Nokia SR Linux","description":"Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00116,"percentile":0.01638,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-134"],"published":"2026-06-16T05:40:23Z","modified":"2026-10-07T08:10:00Z","products":[{"vendor":"nokia","product":"sr linux"}],"references":[{"url":"https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10262"},{"url":"https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262"},{"url":"https://github.com/advisories/GHSA-h3gf-qq8m-r4r7"}],"sources":{"cve":[{"id":"CVE-2025-10262","title":"An unsanitized format validation vulnerability in Nokia SR Linux","description":"Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.","status":"published","published":"2026-06-16T05:40:23.769Z","modified":"2026-06-16T12:32:54.052Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:32:30.9782Z"}],"euvd":[{"id":"EUVD-2025-210164","description":"Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.","status":"published","published":"2026-06-16T05:40:23Z","modified":"2026-06-16T12:32:54Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T18:20:40.605509Z"}],"ghsa":[{"id":"GHSA-h3gf-qq8m-r4r7","title":"Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized...","description":"Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.","status":"published","published":"2026-06-16T06:30:24Z","modified":"2026-06-16T15:33:48Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","level":"medium"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T15:08:48.835344Z"}],"nvd":[{"id":"CVE-2025-10262","description":"Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.","status":"published","published":"2026-06-16T06:16:57.063Z","modified":"2026-10-07T08:10:00.2Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:12:02.535029Z"}]}}