Is CVE-2025-10262 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-10262 being exploited in the wild.

How severe is CVE-2025-10262?

Informational severity, published 16 June 2026.

Is there a fix for CVE-2025-10262?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-10262 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-2025-10262?

Check whether you run Nokia SR Linux. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-10262: Nokia SR Linux privilege escalation via unsanitized format validation

CVE-2025-10262 · Severity: info · Published 2026-06-16

Nokia SR Linux, an operating system used in data center network switches, contains a security flaw that allows a user with limited access to gain full administrative control. By exploiting a weakness in how the system validates certain data formats, an attacker who is already logged into the device can execute restricted commands as a superuser. This could lead to a complete compromise of the network device, allowing the attacker to intercept traffic, modify configurations, or disrupt network operations.

Vendors: Nokia.

Quick answers

Is CVE-2025-10262 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-10262 being exploited in the wild.
How severe is CVE-2025-10262?: Informational severity, published 16 June 2026.
Which products and versions are affected?: Nokia SR Linux.
Is there a fix for CVE-2025-10262?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-10262 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-2025-10262?: Check whether you run Nokia SR Linux. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A local privilege escalation vulnerability exists in Nokia SR Linux due to improper input validation, specifically described as unsanitized format validation. An authenticated attacker with local access to the system can exploit this flaw to bypass security restrictions and execute arbitrary commands with root/superuser privileges. The root cause appears to be a failure to properly sanitize input used in format-related functions or validation routines. While the specific software versions are not listed in the summary, users are advised to consult Nokia's security advisory for patch information.

Affected products

Nokia SR Linux

Timeline

2026-06-16: advisory: NVD published the CVE record based on Nokia's disclosure.

References

https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10262/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.