CVE WatchOct 7, 2026

CVE-2025-10262

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of th

CVSS

6.3

Medium

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: Jun 16, 2026 · Last modified: Oct 7, 2026 · CWE-134

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-09-252026-10-23

Technical description

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

Official references

www.nokia.comhttps://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-454528.3 HIG

17.9%

——5Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.8d CVE-2026-1020628.1 HIG

33.9%

——10An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.9d CVE-2026-1019668.2 HIG

35.9%

——11A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.9d CVE-2026-1019658.8 HIG

48.1%

——14An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI service.9d CVE-2026-945204.9 MED

48.4%

——15Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.9d CVE-2026-858427.8 HIG

23.6%

——7Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.8d