CVE-2025-7406

HighCVSS 7.8

Published: 30/06/2026(UTC)Updated: 10/07/2026(UTC)Translated: 11/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

A vulnerability in Nokia MantaRay NM allows a local attacker with local admin privileges to escalate to full root privileges on the host. Successful exploitation results in root-level filesystem access and the ability to execute actions as root.

Risk Assessment

The organization is at risk of complete system compromise by a privileged local user, potentially leading to data theft, configuration modification, or service disruption.

Recommendation

Restrict the set of commands permitted via sudo for affected accounts as a temporary mitigation. Apply the official vendor patch as soon as it becomes available.

Other vulnerabilities in Nokia MantaRay NM

CVE-2025-24815High
Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.

Original NVD description (English source)

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.