Medium severity · published Apr 7, 2026
CVE-2025-24819
A Relative Path Traversal vulnerability in Nokia MantaRay NM
5.7
CVSS
0.2%
EPSS
No
On KEV
Description
Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MN
MantaRay NM · Nokia
earlier than 25R1-NM (exclusive) · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-24819
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-24819
Vendor Advisory
https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24819/
More from MantaRay NM
8.0
CVE-2025-24818
An OS Command Injection vulnerability in Nokia MantaRay NM
8.0
CVE-2025-24817
An OS Command Injection vulnerability in Nokia MantaRay NM
7.8
CVE-2025-7406
A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM
7.8
CVE-2025-24815
An unrestricted file upload vulnerability in Nokia MantaRay NM
6.5
CVE-2025-24816
An Improper Access Control vulnerability in Nokia MantaRay NM