CVE-2025-9912CWE-269privilege-escalation

CVE-2025-9912

Medium · published June 16, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00110 · 1.2th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-06-16T12:16Z
References (1)
https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-9912/ · b48c3b8f-639e-4c16-8725-497bc411dad0
EPSS history
Timeline
  • 16 JUN 05:58Z
    A local privilege escalation vulnerability in Nokia SR Linux
    cvelistv5