CVEvulnerability

CVE-2025-7406

7.8 HIGH Published 2026-06-30 Modified 2026-09-29 Official page ↗
Status
Analyzed
Published
2026-06-30
Last modified
2026-09-29
Assigner
b48c3b8f-639e-4c16-8725-497bc411dad0
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.

Affected configurations

• nokia mantaray nm (< 25R2-NM)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References