CVE-2025-24816 Nokia CVE debrief

Who should care

Users of Nokia MantaRay Nm, especially those with access to the API, should be aware of this vulnerability and take steps to mitigate it. This includes administrators, security teams, and operators responsible for managing affected deployments. Reviewing and restricting API access, monitoring usage, and implementing additional security measures are recommended.

Technical summary

The CVE-2025-24816 vulnerability in Nokia MantaRay Nm is caused by insufficient authorization within the API, allowing authenticated attackers to access confidential information beyond their privileges. The vulnerability has a CVSS score of 6.5 and a severity of MEDIUM. Affected systems may be exposed to unauthorized data access, and defenders should prioritize patching or mitigating this vulnerability.

Defensive priority

Medium priority should be given to patching or mitigating this vulnerability, as it could allow attackers to access sensitive information.

Recommended defensive actions

• Apply the patch or update provided by Nokia to fix the vulnerability.
• Review and restrict API access to ensure that users only have the privileges they need.
• Monitor API usage for suspicious activity.
• Consider implementing additional security measures, such as multi-factor authentication or IP restrictions.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record was published on 2026-06-30T10:16:33.617Z and last modified on 2026-07-10T17:08:40.157Z. The NVD entry is currently Analyzed. Evidence is limited to public sources and may not reflect the full scope or impact of the vulnerability. Defenders should verify affected systems and review official advisories for specific guidance.

Official resources