CVE-2026-34485A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
Updated under an hour ago ()
Does this affect you?
It affects Nokia 1830 Global Express (GX). Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Nokia
- NVD analysis
- Deferred
- Record last updated
- Oct 20, 2026
- First seen by InfoSec Signals
- Oct 20, 2026
Affected products
Nokia Nokia 1830 Global Express (GX) nokia:1830_global_express_gx (from the name) | G42, GX G31, GX G32, GX G34 releases prior to GX r9.0; r9.0 and later releases not affected | CNA record |
References
- https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34485/
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.