{"id":"CVE-2026-34484","kind":"vulnerability","aliases":["CVE-2026-34484"],"related":[],"title":"Nokia 1830 GX: local shell escape gives authenticated users root access","description":"Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device.","summary":"Nokia 1830 Global Express GX has a flaw in its administrative shell interface. An authenticated local user with a restricted shell can bypass those limits and gain root on the device.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","network-gear","nokia","telecom"],"not_affected_if":["no-local-restricted-accounts"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-20T13:16:43+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T05:04:50+00:00","updated_at":"2026-10-25T05:04:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:04:50Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Nokia 1830 GX: local shell escape gives authenticated users root access","impact":"high","summary":"Nokia 1830 Global Express GX has a flaw in its administrative shell interface. An authenticated local user with a restricted shell can bypass those limits and gain root on the device.","category":"infrastructure","nicknames":[],"who_cares":["nokia","network-gear","telecom"],"confidence":0.5,"needs_auth":"yes","worst_case":"local user gains root on the network device","analyst_note":"Find the Nokia advisory and the affected and fixed firmware versions for 1830 GX; the NVD entry gives no version data.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-local-restricted-accounts"],"who_is_affected":"Teams that run Nokia 1830 Global Express GX network equipment with local shell accounts that are not fully trusted. Exposure depends on who holds restricted shell access; the sources do not name affected firmware versions. Operators who do not use the device or have no local accounts beyond administrators can likely skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000545,"input_tokens":3304,"output_tokens":429,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-34484':14A,17A '1830':2A,25B,56C 'access':11A,82C,95C 'administr':34B,72C 'attack':78C 'authent':8A,38B,76C 'bypass':46B,88C 'cve':12A,15A 'devic':54B,98C 'escal':66C 'escap':6A 'exist':69C 'exploit':84C 'express':27B,58C 'flaw':31B 'gain':50B,93C 'gear':21B 'give':7A 'global':26B,57C 'gx':3A,28B,59C 'infrastructur':18B 'interfac':36B,74C 'limit':48B 'local':4A,39B,64C,77C,89C 'network':20B 'network-gear':19B 'nokia':1A,22B,24B,55C 'privileg':65C 'restrict':43B,80C,91C 'root':10A,51B,94C 'secur':90C 'shell':5A,35B,44B,73C,81C 'telecom':23B 'user':9A,40B 'vulner':61C,67C,86C","nicknames":[],"mitigations":[],"who_affected":"Teams that run Nokia 1830 Global Express GX network equipment with local shell accounts that are not fully trusted. Exposure depends on who holds restricted shell access; the sources do not name affected firmware versions. Operators who do not use the device or have no local accounts beyond administrators can likely skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T13:16:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-34484","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34484","severity":null,"published_at":"2026-10-20T13:16:43+00:00","modified_at":"2026-10-20T20:11:29+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}