CVE-2025-7406

HIGH

Nokia MantaRay NM < 25R1-NM - Local Sudo Privilege Escalation

Title source: manual
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-7406. PoCs published by HermesNA-1.

AI-analyzed exploit summary This repository contains an auto-generated stub module for CVE-2025-7406, a local privilege escalation vulnerability in Nokia MantaRay NM. The code includes placeholder methods (`check` and `run`) but lacks actual exploit implementation, referencing only a Nokia security advisory.

Description

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.

Exploits (1)

github STUB 1 stars
by HermesNA-1 · pythonpoc
https://github.com/HermesNA-1/SnakeSploit/tree/main/data/modules_generated/cve-2025-7406_nokia_mantaray.py

This repository contains an auto-generated stub module for CVE-2025-7406, a local privilege escalation vulnerability in Nokia MantaRay NM. The code includes placeholder methods (`check` and `run`) but lacks actual exploit implementation, referencing only a Nokia security advisory.

Classification
Stub 99%
Attack Type
Lpe
Complexity
Moderate
Reliability
Theoretical
Target: Nokia MantaRay NM
Auth required
Prerequisites: Local administrative privileges on the target system · Access to the vulnerable Nokia MantaRay NM instance
mistral-large-3 · analyzed Jul 09, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0009
EPSS Percentile 0.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Products (3)
Nokia/MantaRay NM <NM 25R1-NM
Nokia/MantaRay NM ≥NM 25R1-NM
nokia/mantaray_nm < 25R2-NM
Published Jun 30, 2026
Tracked Since Jun 30, 2026