What’s Vulnerable › Vulnerabilities

CVE-2025-10258: A time-based SQL Injection vulnerability in Infinera DNA

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-05 · updated 2026-06-17
• Weakness: CWE-89

Description

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information.

Affected products

• Nokia Infinera DNA: before r24.2 — fixed in r24.2

How to fix

Upgrade to a fixed version: Nokia Infinera DNA r24.2. Check the vendor advisory for mitigations.

References

• https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10258/

Get alerted when CVE-2025-10258 or the next vulnerability affects your stack