p PatchFirst

CVE-2026-34485

CVE-2026-34485 · A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.

EPSS 0.2%

Published
Updated

Affected products and versions

  • nokia 1830 global express (gx)

    Versions
    • G42, GX G31, GX G32, GX G34 releases prior to GX r9.0: Affected
    • r9.0 and later releases: Not affected

    No fix published

Original sources

Check your server →