CVE-2026-34484

MediumCVSS 6.7

Published: 20/10/2026(UTC)Updated: 29/10/2026(UTC)Translated: 20/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this to bypass local security restrictions and gain root access on the device.

Risk Assessment

An attacker with restricted shell access can obtain full administrative (root) privileges, enabling takeover of the network device and further lateral movement.

Recommendation

Update the Nokia 1830 Global Express GX firmware to a version containing the fix and restrict administrative shell access to trusted accounts only.

Other vulnerabilities in Nokia 1830 Global Express GX

CVE-2026-34485High
Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL bypass where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This occurs by default and is not the result of misconfiguration.

Original NVD description (English source)

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS