Nokia vulnerabilities

Products

• Netact 12
• 1350 Optical Management System 10
• Hit 7300 Firmware 7
• Impact 7
• Network Functions Manager For Transport 7
• Single Ran 7
• G-040w-q Firmware 6
• I-240w-q Gpon Ont Firmware 6
• Mantaray Nm 6
• Mantaray Nm 6
• G42 Firmware 5
• Infinera Mtc-9 Firmware 5
• Affix 4
• Asika Airscale Firmware 4
• Transcend Network Management System 4
• 6131 Nfc 3
• Asik Airscale 3
• Asik Airscale 474021a.101 Firmware 3
• Electronic Documentation 3
• Fastmile Firmware 3
• Groupwise Mobile Server 3
• Heif 3
• Intellisync Mobile Suite 3
• Intellisync Wireless Email Express 3
• Wavesuite Noc 3
• Wavesuite Noc 3
• Asik Airscale 474021a.102 Firmware 2
• Broadcast Message Center 2
• Cbis,ncs 2
• Impact Mobile 2
• N70 2
• N95 2
• 1830 Global Express (gx) 2
• Nsp 2
• Service Router Operating System 2
• Sr Linux 2
• Sr Os (7250 Ixr, 7450 Ess, 7750 Sr, 7950 Ixr, Vsr), 7705 Sar Os, 7210 Sas Os 2
• Symbian 2

Newest

• nokia 1830 global express (gx) A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX) CVE-2026-34485 7.8 HighOctober 20, 2026
• nokia 1830 global express (gx) A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX) CVE-2026-34484 6.7 MediumOctober 20, 2026
• nokia nsp An Open Re-direct Vulnerability in Nokia NSP CVE-2026-40465 5.3 MediumAugust 31, 2026
• nokia nsp A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP CVE-2026-40464 5.4 MediumAugust 31, 2026
• nokia wavesuite An Insufficient Role-based Access Control Vulnerability in WaveSuite CVE-2026-40463 7.6 HighAugust 31, 2026
• nokia mantaray nm A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM CVE-2025-7406 7.8 HighJune 30, 2026
• nokia mantaray nm An Improper Access Control vulnerability in Nokia MantaRay NM CVE-2025-24816 6.5 MediumJune 30, 2026
• nokia mantaray nm An unrestricted file upload vulnerability in Nokia MantaRay NM CVE-2025-24815 7.8 HighJune 30, 2026
• nokia sr linux A local privilege escalation vulnerability in Nokia SR Linux CVE-2025-9912 6.3 MediumJune 16, 2026
• nokia sr linux An unsanitized format validation vulnerability in Nokia SR Linux CVE-2025-10262 6.3 MediumJune 16, 2026
• nokia broadcast message center Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do... CVE-2022-45899 6.5 MediumMay 8, 2026
• nokia mantaray nm A Relative Path Traversal vulnerability in Nokia MantaRay NM CVE-2025-24819 5.7 MediumApril 7, 2026
• nokia mantaray nm An OS Command Injection vulnerability in Nokia MantaRay NM CVE-2025-24818 8.0 HighApril 7, 2026
• nokia mantaray nm An OS Command Injection vulnerability in Nokia MantaRay NM CVE-2025-24817 8.0 HighApril 7, 2026
• nokia impact mobile An issue was discovered in Nokia Impact before Mobile 23_FP1. In Impact DM 19.11 onwards, a... CVE-2023-31044 2.0 LowMarch 3, 2026
• nokia impact mobile A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10... CVE-2021-35486 8.1 HighMarch 3, 2026
• nokia impact The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an... CVE-2021-35485 8.0 HighMarch 3, 2026
• nokia impact Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time... CVE-2021-35484 8.2 HighMarch 3, 2026
• nokia impact The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an... CVE-2021-35483 4.1 MediumMarch 3, 2026
• nokia infinera dna A time-based SQL Injection vulnerability in Infinera DNA CVE-2025-10258 6.3 MediumFebruary 5, 2026
• nokia ont Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product CVE-2025-9974 Public exploit 8.0 HighFebruary 2, 2026
• nokia sr linux JSON RPC authentication bypass in Nokia SR Linux CVE-2025-0980 6.4 MediumJanuary 7, 2026
• infinera mtc-9, nokia infinera mtc-9 firmware +1 more Improper configuration of SSH service in Infinera MTC-9 CVE-2025-27020 9.8 CriticalDecember 8, 2025
• infinera mtc-9, nokia infinera mtc-9 firmware +1 more Remote shell service (RSH) in Infinera MTC-9 CVE-2025-27019 9.8 CriticalDecember 8, 2025
• infinera mtc-9, nokia infinera mtc-9 firmware +1 more Improper input validation in Netconf service in Infinera MTC-9 CVE-2025-26489 6.5 MediumDecember 8, 2025
• infinera mtc-9, nokia infinera mtc-9 firmware +1 more Improper input validation in XML Management service in Infinera MTC-9 CVE-2025-26488 7.5 HighDecember 8, 2025
• infinera mtc-9, nokia infinera mtc-9 firmware +1 more Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9 CVE-2025-26487 8.6 HighDecember 8, 2025
• nokia cbis,ncs Remote Code Execution CVE-2023-49565 8.4 HighSeptember 18, 2025
• nokia cbis,ncs Authentication Bypass CVE-2023-49564 8.8 HighSeptember 18, 2025
• nokia wavesuite noc Insufficient Validation of Input while user creation CVE-2025-24938 8.4 HighJuly 21, 2025
• nokia wavesuite noc Access to local file system and its content CVE-2025-24937 9.0 CriticalJuly 21, 2025
• nokia wavesuite noc Insufficient Validation of Input in the URL CVE-2025-24936 9.0 CriticalJuly 21, 2025
• infinera g42, nokia g42 firmware +1 more Improper Access Control Granularity impacting Infinera G42 CVE-2025-27026 4.9 MediumJuly 2, 2025
• infinera g42, nokia g42 firmware +1 more Improper File Access in Infinera G42 CVE-2025-27024 6.5 MediumJuly 2, 2025
• infinera g42, nokia g42 firmware +1 more Improper Input Validation in Infinera G42 CVE-2025-27023 6.5 MediumJuly 2, 2025
• infinera g42, nokia g42 firmware +1 more Path Traversal Vulnerability in Infinera G42 CVE-2025-27022 7.5 HighJuly 2, 2025
• infinera g42, nokia g42 firmware +1 more Operating System Misconfiguration in Infinera G42 CVE-2025-27021 7.0 HighJuly 2, 2025
• nokia single ran SOAP message input validation fault could in theory cause OAM service resource exhaustion CVE-2025-24335 2.0 LowJuly 2, 2025
• nokia single ran The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network CVE-2025-24334 3.3 LowJuly 2, 2025
• nokia single ran Administrative user shell input validation fault CVE-2025-24333 6.4 MediumJuly 2, 2025
• nokia single ran airscale (flexi multiradio is not affected) Authenticated admin user can connect baseband internally from one board to another without needing to re-authentication CVE-2025-24332 7.1 HighJuly 2, 2025
• nokia single ran Nokia Single RAN baseband OAM service extensive capabilities CVE-2025-24331 6.4 MediumJuly 2, 2025
• nokia single ran OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management network CVE-2025-24330 6.4 MediumJuly 2, 2025
• nokia single ran OAM service path traversal issue caused by a crafted SOAP message archive field within the RAN management network CVE-2025-24329 6.4 MediumJuly 2, 2025
• nokia single ran OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network CVE-2025-24328 4.2 MediumJuly 2, 2025
• nokia service router operating system, sr os (7250 ixr, 7450 ess, 7750 sr, 7950 ixr, vsr), 7705 sar os, 7210 sas os +1 more Nokia SR OS: File Access Security Vulnerability CVE-2023-6729 7.3 HighOctober 17, 2024
• nokia sr os (7250 ixr, 7450 ess, 7750 sr, 7950 ixr, vsr), 7705 sar os, 7210 sas os Nokia SR OS: BOF File Encryption Vulnerability CVE-2023-6728 3.3 LowOctober 17, 2024
• infinera tnms, nokia transcend network management system +1 more In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive... CVE-2024-25661 7.7 HighOctober 1, 2024
• infinera tnms, nokia transcend network management system +1 more The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low... CVE-2024-25660 9.0 CriticalOctober 1, 2024
• infinera tnms, nokia transcend network management system +1 more In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration... CVE-2024-25659 7.2 HighOctober 1, 2024
• Show olderLoading…