7.6Yüksek

CVE-2026-40463An Insufficient Role-based Access Control Vulnerability in WaveSuite

Nokia WaveSuite Yayım: (2 ay önce)

Açıklama

WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser.

Zayıflık türü (CWE): CWE-284

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Nokia WaveSuite 25.6, 24.12, 24.6, 23.6, fixed 25.12FP1 and later

Kaynaklar ve yamalar