CVE-2025-24815

Published: Jun 30, 2026Modified: Sep 29, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.

Affected (1)

Products: Nokia: Mantaray Nm

Nokia

1 product

Mantaray Nm

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nokia Mantaray Nm	version < 25R2-NM

Related CWEs

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (1)

https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24815/

Source: b48c3b8f-639e-4c16-8725-497bc411dad0

Vendor Advisory

Timeline

No history available yet.