CVE-2026-34485

CVE-2026-34485

published October 20, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-10-20T17:16Z
References (1)
https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34485/ · b48c3b8f-639e-4c16-8725-497bc411dad0
EPSS history
Timeline
  • 22 OCT 03:32Z
    EPSS moved — → 0%
    epss
  • 20 OCT 12:13Z
    A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
    cvelistv5
  • 20 OCT 12:13Z
    A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
    cvelistv5