Description
NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nokia | NSP | 23.11, 24.4, 24.8, 24.11, 25.4, 25.8, 25.11 | NSP 24.11-SP15 |
Medium · 5.3
CVE-2026-40465
EUVD-2026-68374GHSA-7vrg-9396-hg47
An Open Re-direct Vulnerability in Nokia NSP
Published Aug 31, 2026 · Updated Aug 31, 2026 · Assigned by Nokia