CVE-2025-24815CWE-434unrestricted-file-upload

CVE-2025-24815

High · published June 30, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-06-30T14:16Z
Affected products (1)
ProductVersionsFixed in
nokia/mantaray_nm< 25R2-NM25R2-NM
References (1)
https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24815/ · b48c3b8f-639e-4c16-8725-497bc411dad0
EPSS history
Timeline
  • 30 JUN 08:55Z
    An unrestricted file upload vulnerability in Nokia MantaRay NM
    cvelistv5