AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NokiaCVE-2026-40465

Nokia NSP: open redirect

Nokia

CVE-2026-40465 · Published Aug 31, 2026 · updated Sep 3, 2026

Medium5.3
No fix yet
Nokia advisory

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.

Affected versions

PackageAffectedFixed in
NSP
Product
<= 23.11No fix yet
<= 24.4No fix yet
<= 24.8No fix yet
<= 24.11No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-601

More Nokia advisories

All Nokia
High 7.8Oct 20Nokia 1830 Global Express (GX): improper access controlCVE-2026-34485no fix yetMedium 6.7Oct 20Nokia 1830 Global Express (GX): privilege escalationCVE-2026-34484no fix yetMedium 5.4Aug 31Nokia NSP: cross-site scriptingCVE-2026-40464no fix yetHigh 7.6Aug 31Nokia WaveSuite: improper access controlCVE-2026-40463no fix yet