CVE-2026-34485: A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
Published Oct 20, 2026
·Updated
Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.
Affected Software
1 affected component
Nokia 1830 Global Express (GX)
Event History
Oct 20, 2026
CVE Published
via MITRE·12:13 PM
Data Sourced
via MITRE·12:13 PM
Description
Data Sourced
via NVD·01:16 PM
Description
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be authenticated to the Nokia 1830 Global Express CLI and have a low-privileged account. No unauthenticated access is described.
2
Does this require a non-default or misconfigured deployment?
No. The vulnerability occurs in the default system configuration and is not attributed to misconfiguration.
3
What access can an attacker gain after exploitation?
A low-privileged authenticated attacker can bypass SSH isolation and access the underlying operating system shell using a custom SSH command.