23
CVEs
2
Critical
10
High
0
KEV
1
PoC
11
Unpatched C/H
17.4%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
2
HIGH
10
MEDIUM
10
LOW
1
Monthly CVE Trend
Affected Products (30)
1350 Optical Management System
10
Netact
7
Hit 7300 Firmware
7
Impact
7
G 040W Q Firmware
6
I 240W Q Gpon Ont Firmware
6
G42 Firmware
5
Infinera Mtc 9 Firmware
5
Transcend Network Management System
4
Asika Airscale Firmware
4
Fastmile Firmware
3
Heif
3
Mantaray Nm
3
Open Redirect
3
Impact Mobile
2
Nsp
2
Nokia Maps Places
1
Pc Suite
1
Iphone Os
1
G 2425G A Firmware
1
Wavelite Metro 200 Ops And Fans Firmware
1
Service Router Linux
1
Service Router Operating System
1
Bcm4325
1
Vantage Commander
1
Infinera Dna
1
Airframe Bmc Web Gui R18 Firmware
1
Fastmile 5G Receiver Firmware
1
Bcm4329
1
Linux Kernel
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2022-45899 | Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 6.5 | 0.9% | 53 |
PoC
No patch
|
| CVE-2025-27020 | Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0. | CRITICAL | 9.8 | 0.2% | 49 |
No patch
|
| CVE-2025-27019 | Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0. | CRITICAL | 9.8 | 0.1% | 49 |
No patch
|
| CVE-2025-26487 | Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge. | HIGH | 8.6 | 0.1% | 43 |
No patch
|
| CVE-2021-35484 | Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.0% | 41 |
No patch
|
| CVE-2021-35486 | Impact Mobile versions up to 19.11.2.10-20210118042150283 is affected by cross-site request forgery (csrf) (CVSS 8.1). | HIGH | 8.1 | 0.0% | 41 |
No patch
|
| CVE-2025-24818 | OS command injection in Nokia MantaRay NM Log Search application allows authenticated adjacent network attackers to execute arbitrary OS commands with high impact to confidentiality, integrity, and availability. The vulnerability affects versions prior to 25R1-NM due to improper neutralization of special elements in OS commands (CWE-77). CVSS score of 8.0 reflects high severity with low attack complexity requiring low-level authentication from adjacent network position. No public exploit identified at time of analysis, though command injection vulnerabilities are well-understood and relatively straightforward to exploit once access requirements are met. | HIGH | 8.0 | 0.1% | 40 |
No patch
|
| CVE-2025-24817 | OS command injection in Nokia MantaRay NM Symptom Collector application allows authenticated adjacent network attackers to execute arbitrary OS commands with high confidentiality, integrity, and availability impact. The vulnerability affects all versions prior to 25R1-NM and requires low-privilege authenticated access over adjacent network with low attack complexity. No public exploit identified at time of analysis, with EPSS exploitation probability at 0.06% (19th percentile), indicating relatively low observed real-world exploitation likelihood despite the high CVSS score. | HIGH | 8.0 | 0.1% | 40 |
No patch
|
| CVE-2021-35485 | Impact versions up to 19.11.2.10-20210118042150283 is affected by unrestricted upload of file with dangerous type (CVSS 8.0). | HIGH | 8.0 | 0.0% | 40 |
No patch
|
| CVE-2025-24815 | Arbitrary file upload in Nokia MantaRay NM (network management) prior to 25R2-NM allows an authenticated, low-privileged attacker to bypass insufficient file-type validation and place malicious files on the host, leading to full compromise of confidentiality, integrity, and availability (CVSS 7.8). The flaw is a CWE-434 unrestricted upload; the CVSS vector specifies a local attack vector (AV:L) rather than remote network exploitation. No public exploit identified at time of analysis, and the EPSS score is very low (0.18%, 7th percentile). | HIGH | 7.8 | 0.2% | 39 |
|
| CVE-2025-7406 | Local privilege escalation in Nokia MantaRay NM (network management) lets an attacker who already holds local administrative privileges abuse a misconfigured sudo command set to obtain full root access on the host, gaining complete control of the filesystem and arbitrary root command execution. The flaw was reported by Nokia and affects versions prior to NM 25R1-NM, with no public exploit identified at time of analysis and a low EPSS exploitation probability of 0.17%. | HIGH | 7.8 | 0.2% | 39 |
No patch
|
| CVE-2026-40463 | Privilege escalation in Nokia WaveSuite's CPB Log Files feature allows authenticated low-privilege users to access pages reserved for higher-privilege roles by directly navigating to their URLs, bypassing server-side role enforcement entirely. Affected versions confirmed by EUVD-2026-68372 include WaveSuite 23.6, 24.6, 24.12, and 25.6. No public exploit code exists and no active exploitation has been observed (EPSS: 0.14%, 4th percentile), though the trivial attack mechanism - crafting a direct HTTP request - makes this a meaningful risk for insider threat and compromised low-privilege account scenarios in telecom environments. | HIGH | 7.6 | 0.1% | 38 |
No patch
|
| CVE-2025-26488 | Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0. | HIGH | 7.5 | 0.1% | 38 |
No patch
|
| CVE-2025-24816 | Insufficient authorization enforcement in the Nokia MantaRay NM API allows authenticated low-privilege users to retrieve confidential data beyond their assigned role boundaries. Affected are all Nokia MantaRay NM deployments running versions prior to 25R2-NM, a telecom-focused network management platform. No public exploit code or CISA KEV listing has been identified; with EPSS at 0.18% (7th percentile), real-world exploitation pressure is currently low, though the high confidentiality impact and low attack complexity make patching a priority for any operator with untrusted authenticated users. | MEDIUM | 6.5 | 0.2% | 33 |
|
| CVE-2025-26489 | Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0. | MEDIUM | 6.5 | 0.2% | 33 |
No patch
|