What’s Vulnerable › Vulnerabilities

CVE-2025-24816: An Improper Access Control vulnerability in Nokia MantaRay NM

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-30 · updated 2026-09-29
• Weakness: CWE-284

Description

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.

Affected products

• Nokia MantaRay NM: before 25R2-NM — fixed in 25R2-NM

How to fix

Upgrade to a fixed version: Nokia MantaRay NM 25R2-NM. Check the vendor advisory for mitigations.

References

• https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24816/

Get alerted when CVE-2025-24816 or the next vulnerability affects your stack