CVE-2025-10262CWE-134

CVE-2025-10262

Medium · published June 16, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-134 · Use of Externally-Controlled Format String
Published
2026-06-16T10:16Z
References (1)
https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/ · b48c3b8f-639e-4c16-8725-497bc411dad0
EPSS history
Timeline
  • 16 JUN 05:40Z
    An unsanitized format validation vulnerability in Nokia SR Linux
    cvelistv5