Command Execution Vulnerability in Nokia's Web Application

CVE-2025-24936

What is CVE-2025-24936?

A critical security vulnerability exists in Nokia's web application, allowing unfiltered user input to be executed as commands on the underlying operating system. This flaw, which can be exploited by attackers with low privileged access, jeopardizes the integrity and security of the system. Given that the vulnerable component interfaces with the network stack, the potential for exploitation extends to a wide range of threat actors online. It is essential for users and administrators to take immediate action to mitigate this risk and protect their systems.

References