What’s Vulnerable › Vulnerabilities

CVE-2025-24815: An unrestricted file upload vulnerability in Nokia MantaRay NM

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-30 · updated 2026-09-29
• Weakness: CWE-434

Description

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.

Affected products

• Nokia MantaRay NM: before 25R2-NM — fixed in 25R2-NM

How to fix

Upgrade to a fixed version: Nokia MantaRay NM 25R2-NM. Check the vendor advisory for mitigations.

References

• https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24815/

Get alerted when CVE-2025-24815 or the next vulnerability affects your stack