CVE-2026-34485
Last modified
CVE-2026-34485 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Nokia | Nokia 1830 Global Express (GX) | G42, GX G31, GX G32, GX G34 releases prior to GX r9.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-34485?
How severe is CVE-2026-34485?
How do I fix CVE-2026-34485?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-34478Apache Log4j Core's Rfc5424Layout https://logging.apache.or…7.5
- CVE-2026-34479The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridg…7.5
- CVE-2026-34480Apache Log4j Core's XmlLayout https://logging.apache.org/lo…7.5
- CVE-2026-34481Apache Log4j's JsonTemplateLayout https://logging.apache.or…7.5
- CVE-2026-34483Improper Encoding or Escaping of Output vulnerability in the…7.5
- CVE-2026-34484Nokia 1830 Global Express GX is vulnerable to a local privil…6.7
- CVE-2026-34486Missing Encryption of Sensitive Data vulnerability in Apache…7.5
- CVE-2026-34487Insertion of Sensitive Information into Log File vulnerabili…7.5
- CVE-2026-34488IP Setting Software contains an issue with the DLL search pa…7
- CVE-2026-3449Versions of the package @tootallnate/once before 3.0.1 are v…3.3
- CVE-2026-34490Cleartext storage of sensitive information vulnerability in …5.5
- CVE-2026-34491Improper neutralization of input during web page generation …6.1
Are you affected by CVE-2026-34485?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST