CVE-2025-10262

MEDIUM

Nokia SR Linux - Authenticated Local Privilege Escalation

Title source: manual

Description

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

References (1)

Core 1

Core References

Nokia Security Advisory

https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/

Scores

CVSS v3 6.3

EPSS 0.0012

EPSS Percentile 1.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-134

Status published

Products (6)

Nokia/SR Linux 23.10.8

Nokia/SR Linux 24.10.6

Nokia/SR Linux 25.7.2

Nokia/SR Linux < 23.10.8

Nokia/SR Linux < 24.10.6

Nokia/SR Linux < 25.7.2

Published Jun 16, 2026

Tracked Since Jun 16, 2026