Skip to content
OpenAdvisories
High · 7.8 CVE-2026-34485 EUVD-2026-104986GHSA-3hcg-f3cv-j8xc

A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)

Published Oct 20, 2026 · Updated Oct 29, 2026 · Assigned by Nokia

Description

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.

Affected products

VendorProductAffectedFixed
Nokia Nokia 1830 Global Express (GX) G42, GX G31, GX G32, GX G34 releases prior to GX r9.0 r9.0 and later releases

References