CLI ACL Bypass Vulnerability in Nokia 1830 Global Express
CVE-2026-34485

Currently unrated

Key Information:

Vendor

Nokia
Status
Nokia 1830 Global Express (gx)
Vendor
CVE Published:
20 October 2026

What is CVE-2026-34485?

The Nokia 1830 Global Express (GX) is susceptible to a CLI ACL Bypass vulnerability. This issue allows a low-privileged authenticated attacker to circumvent the SSH isolation mechanism. By leveraging a custom SSH command, the attacker can gain unauthorized access to the underlying operating system shell. Notably, this vulnerability exists by default in the system and is not attributed to any misconfiguration errors.

Affected Version(s)

Nokia 1830 Global Express (GX) G42, GX G31, GX G32, GX G34 releases prior to GX r9.0

Nokia 1830 Global Express (GX) r9.0 and later releases

References

https://www.nokia.com/we-are-nokia/security/product-secur...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.