CVE-2025-24816: An Improper Access Control vulnerability in Nokia MantaRay NM
Published Jun 30, 2026
·Updated
Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.
Affected Software
2 affected components
Nokia MantaRay NM
Nokia MantaRay NM<25R2-NM
Event History
Jun 30, 2026
CVE Published
via MITRE·08:58 AM
Data Sourced
via MITRE·08:58 AM
Description
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-24816?
CVE-2025-24816 has a medium severity rating of 6.5 based on the CVSS 3.1 score.
2
How do I fix CVE-2025-24816?
To mitigate CVE-2025-24816, ensure proper authorization checks are implemented within the Nokia MantaRay NM API.
3
What type of vulnerability is identified in CVE-2025-24816?
CVE-2025-24816 is classified as an Improper Access Control vulnerability.
4
What could an attacker achieve by exploiting CVE-2025-24816?
An authenticated attacker exploiting CVE-2025-24816 could retrieve confidential information beyond their assigned privileges.
5
Which software is affected by CVE-2025-24816?
CVE-2025-24816 affects the Nokia MantaRay NM software.