CVE-2026-34485

Description

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.

Traduire en français

Produits concernés

• Nokia 1830 Global Express (GX)

Références

• https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34485/

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories