CVE-2025-9912

Published: Jun 16, 2026Modified: Jun 17, 2026

6.3

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

Exploitability: 0.8 / Impact: 5.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-9912/

Source: b48c3b8f-639e-4c16-8725-497bc411dad0

Timeline

No history available yet.