CVE-2025-7406CWE-269privilege-escalation

CVE-2025-7406

High · published June 30, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-06-30T14:16Z
Affected products (1)
ProductVersionsFixed in
nokia/mantaray_nm< 25R2-NM25R2-NM
References (1)
EPSS history
Timeline
  • 30 JUN 08:59Z
    A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM
    cvelistv5