CVE Watch7 oct 2026

CVE-2025-10262

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of th

CVSS

6.3

Medio

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 16 jun 2026 · Última mod.: 7 oct 2026 · CWE-134

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-09-262026-10-23

Descripción técnica

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

Referencias oficiales

www.nokia.comhttps://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-454528.3 ALT

17.9%

——5Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.8d CVE-2026-1020628.1 ALT

33.9%

——10An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.9d CVE-2026-1019668.2 ALT

35.9%

——11A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.9d CVE-2026-1019658.8 ALT

48.1%

——14An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI service.9d CVE-2026-945204.9 MED

48.4%

——15Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.9d CVE-2026-858427.8 ALT

23.6%

——7Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.8d