CVE-2025-24815 An unrestricted file upload vulnerability in Nokia MantaRay NM
An authenticated attacker can upload malicious files to Nokia MantaRay NM due to insufficient validation, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-24815?
CVE-2025-24815 is a high-severity vulnerability in Nokia MantaRay NM, published on 30 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.
Weakness: CWE-434
Which versions are affected by CVE-2025-24815?
It affects 1 product.
Products include Nokia Mantaray Nm.
How do I fix CVE-2025-24815?
No fix has been published for CVE-2025-24815 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-24815 being exploited?
There is no known exploitation of CVE-2025-24815 in the wild and no public exploit code.
Other vulnerabilities in Nokia MantaRay NM
- CVE-2025-24817 An OS Command Injection vulnerability in Nokia MantaRay NM
- CVE-2025-24818 An OS Command Injection vulnerability in Nokia MantaRay NM
- CVE-2025-7406 A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM
- CVE-2025-24816 An Improper Access Control vulnerability in Nokia MantaRay NM
- CVE-2025-24819 A Relative Path Traversal vulnerability in Nokia MantaRay NM
Sources
Also known as GHSA-2wj6-jgr2-x79w.