CVE-2025-10262

Published: Jun 16, 2026Modified: Jun 17, 2026

6.3

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

Exploitability: 0.8 / Impact: 5.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

Related CWEs

CWE-134

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (1)

https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/

Source: b48c3b8f-639e-4c16-8725-497bc411dad0

Timeline

No history available yet.