Quick answers
- Is CVE-2025-24815 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2025-24815 being exploited in the wild.
- How severe is CVE-2025-24815?
- Informational severity, published 30 June 2026.
- Which products and versions are affected?
- Nokia MantaRay NM < 25R2-NM.
- Is there a fix for CVE-2025-24815?
- A patch was published on 2026-06-30: Version 25R2-NM listed as unaffected Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2025-24815 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2025-24815?
- Check whether you run Nokia MantaRay NM at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An unrestricted file upload vulnerability exists in Nokia MantaRay NM due to insufficient validation of file types during the upload process. An authenticated attacker can exploit this flaw by uploading arbitrary files, potentially including malicious scripts or executables, to the server. The vulnerability is reachable over the network but requires valid authentication credentials. If the uploaded files are stored in a web-accessible directory or executed by the system, it could lead to remote code execution (RCE). The issue is addressed in version 25R2-NM and later.
Affected products
- Nokia MantaRay NM < 25R2-NM
Timeline
- 2026-06-30: advisory: NVD publication date
- 2026-06-30: patched: Version 25R2-NM listed as unaffected