VULNERABILITY INTELLIGENCE

CVE-2025-24816

CVSS score6.5 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-06-30
Last modified2026-09-29
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284

Primary references