CVE-2025-10262: An unsanitized format validation vulnerability in Nokia SR Linux

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-16 · updated 2026-10-07
Weakness: CWE-134

Description

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

Affected products

Nokia SR Linux: before 23.10.8; before 24.10.6; before 25.7.2

References

https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/

Get alerted when CVE-2025-10262 or the next vulnerability affects your stack