Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2025-9912

Summary
Assigner-Nokia
Assigner Org ID-b48c3b8f-639e-4c16-8725-497bc411dad0
Published At-16 Jun, 2026 | 05:58
Updated At-16 Jun, 2026 | 12:28
Rejected At-
Credits

A local privilege escalation vulnerability in Nokia SR Linux

Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Nokia
Assigner Org ID:b48c3b8f-639e-4c16-8725-497bc411dad0
Published At:16 Jun, 2026 | 05:58
Updated At:16 Jun, 2026 | 12:28
Rejected At:
▼CVE Numbering Authority (CNA)
A local privilege escalation vulnerability in Nokia SR Linux

Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.

Affected Products
Vendor
Nokia CorporationNokia
Product
Nokia SR Linux
Default Status
affected
Versions
Affected
  • < 23.10.8
  • < 24.10.6
  • < 25.7.2
Vendor
Nokia CorporationNokia
Product
Nokia SR Linux
Versions
Unaffected
  • 23.10.8
  • 24.10.6
  • 25.7.2
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-9912/
N/A
Hyperlink: https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-9912/
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-269CWE-269 Improper Privilege Management
Type: CWE
CWE ID: CWE-269
Description: CWE-269 Improper Privilege Management
Metrics
VersionBase scoreBase severityVector
3.16.3MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
Version: 3.1
Base score: 6.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:b48c3b8f-639e-4c16-8725-497bc411dad0
Published At:16 Jun, 2026 | 08:16
Updated At:16 Jun, 2026 | 13:16

Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.16.3MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
Type: Secondary
Version: 3.1
Base score: 6.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-269Secondary134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE ID: CWE-269
Type: Secondary
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-9912/b48c3b8f-639e-4c16-8725-497bc411dad0
N/A
Hyperlink: https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-9912/
Source: b48c3b8f-639e-4c16-8725-497bc411dad0
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

2Records found

CVE-2025-10262
Matching Score-8
Assigner-Nokia
ShareView Details
Matching Score-8
Assigner-Nokia
CVSS Score-6.3||MEDIUM
EPSS-0.12% / 1.90%
||
7 Day CHG~0.00%
Published-16 Jun, 2026 | 05:40
Updated-16 Jun, 2026 | 13:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
An unsanitized format validation vulnerability in Nokia SR Linux

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

Action-Not Available
Vendor-Nokia Corporation
Product-SR Linux
CWE ID-CWE-134
Use of Externally-Controlled Format String
CVE-2025-7406
Matching Score-6
Assigner-Nokia
ShareView Details
Matching Score-6
Assigner-Nokia
CVSS Score-7.8||HIGH
EPSS-0.09% / 0.71%
||
7 Day CHG-0.03%
Published-30 Jun, 2026 | 08:59
Updated-10 Jul, 2026 | 17:17
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.

Action-Not Available
Vendor-Nokia Corporation
Product-mantaray_nmMantaRay NM
CWE ID-CWE-269
Improper Privilege Management
Details not found