CVE-2025-10262

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10262", "assignerOrgId": "b48c3b8f-639e-4c16-8725-497bc411dad0", "state": "PUBLISHED", "assignerShortName": "Nokia", "dateReserved": "2025-09-11T08:45:07.544Z", "datePublished": "2026-06-16T05:40:23.769Z", "dateUpdated": "2026-06-16T12:32:54.052Z"}, "containers": {"cna": {"title": "An unsanitized format validation vulnerability in Nokia SR Linux", "descriptions": [{"lang": "en", "value": "Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges."}], "affected": [{"vendor": "Nokia", "product": "SR Linux", "defaultStatus": "affected", "versions": [{"version": "< 23.10.8", "status": "affected"}, {"version": "< 24.10.6", "status": "affected"}, {"version": "< 25.7.2", "status": "affected"}]}, {"vendor": "Nokia", "product": "SR Linux", "defaultStatus": "unaffected", "versions": [{"version": "23.10.8", "status": "unaffected"}, {"version": "24.10.6", "status": "unaffected"}, {"version": "25.7.2", "status": "unaffected"}]}], "references": [{"url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/", "name": "Nokia Product Security Advisory"}], "x_generator": {"engine": "cveClient/1.0.15"}, "providerMetadata": {"orgId": "b48c3b8f-639e-4c16-8725-497bc411dad0", "shortName": "Nokia", "dateUpdated": "2026-06-16T05:58:15.720Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-134", "lang": "en", "description": "CWE-134 Use of Externally-Controlled Format String"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-06-16T12:31:09.043017Z", "id": "CVE-2025-10262", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-16T12:32:54.052Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-10262", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-16T12:31:09.043017Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-134", "description": "CWE-134 Use of Externally-Controlled Format String"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-16T12:31:01.714Z"}}], "cna": {"title": "An unsanitized format validation vulnerability in Nokia SR Linux", "affected": [{"vendor": "Nokia", "product": "SR Linux", "versions": [{"status": "affected", "version": "< 23.10.8"}, {"status": "affected", "version": "< 24.10.6"}, {"status": "affected", "version": "< 25.7.2"}], "defaultStatus": "affected"}, {"vendor": "Nokia", "product": "SR Linux", "versions": [{"status": "unaffected", "version": "23.10.8"}, {"status": "unaffected", "version": "24.10.6"}, {"status": "unaffected", "version": "25.7.2"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/", "name": "Nokia Product Security Advisory"}], "x_generator": {"engine": "cveClient/1.0.15"}, "descriptions": [{"lang": "en", "value": "Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges."}], "providerMetadata": {"orgId": "b48c3b8f-639e-4c16-8725-497bc411dad0", "shortName": "Nokia", "dateUpdated": "2026-06-16T05:58:15.720Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10262", "state": "PUBLISHED", "dateUpdated": "2026-06-16T12:32:54.052Z", "dateReserved": "2025-09-11T08:45:07.544Z", "assignerOrgId": "b48c3b8f-639e-4c16-8725-497bc411dad0", "datePublished": "2026-06-16T05:40:23.769Z", "assignerShortName": "Nokia"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "SR Linux", "vendor": "Nokia", "versions": [{"status": "affected", "version": "< 23.10.8"}, {"status": "affected", "version": "< 24.10.6"}, {"status": "affected", "version": "< 25.7.2"}]}, {"defaultStatus": "unaffected", "product": "SR Linux", "vendor": "Nokia", "versions": [{"status": "unaffected", "version": "23.10.8"}, {"status": "unaffected", "version": "24.10.6"}, {"status": "unaffected", "version": "25.7.2"}]}], "source": "b48c3b8f-639e-4c16-8725-497bc411dad0"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges."}, {"lang": "es", "value": "Nokia SR Linux es vulnerable a una vulnerabilidad de escalada de privilegios local debido a una validaci\u00f3n de formato sin sanear. La explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda permitir a un usuario autenticado ejecutar comandos arbitrarios con privilegios de superusuario."}], "id": "CVE-2025-10262", "lastModified": "2026-10-07T08:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.5, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10262", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-16T12:31:09.043017Z", "version": "2.0.3"}}]}, "published": "2026-06-16T06:16:57.063", "references": [{"source": "b48c3b8f-639e-4c16-8725-497bc411dad0", "url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/"}], "sourceIdentifier": "b48c3b8f-639e-4c16-8725-497bc411dad0", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-134"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,23.10.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,24.10.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,25.7.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "SR Linux", "source": "cna", "vendor": "Nokia"}, "product": "sr_linux", "vendor": "nokia"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "23.10.8"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "24.10.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "25.7.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "SR Linux", "source": "cna", "vendor": "Nokia"}, "product": "sr_linux", "vendor": "nokia"}], "created": "2026-06-16T20:30:03.744379+00:00", "updated": "2026-06-23T21:06:07.135439+00:00", "vendors": ["nokia", "nokia$PRODUCT$sr_linux"]}