Live › vulnerability › CVE-2026-34485
Go to dashboardNokia 1830 Global Express (GX) has a CLI access-control bypass: a low-privileged authenticated user can escape the SSH isolation and reach the underlying operating system shell through a custom SSH command. The flaw is present by default and is not caused by misconfiguration.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Operators of Nokia 1830 Global Express (GX) G42, G31, G32 and G34 running a release before GX r9.0. Exploitation needs a valid low-privileged SSH login, and the flaw is present by default (not a misconfiguration), so it matters most where many users or service accounts can SSH to the device. Anyone not running these products, or already on GX r9.0+, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Nokia 1830 Global Express (GX) | vendor | G42, G31, G32, G34 releases prior to GX r9.0 | GX r9.0 |
Upgrade Nokia 1830 GX to release GX r9.0 or later (Nokia advisory lists no workaround).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.
This page as .md · .json · in your agent: get_signal("CVE-2026-34485")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.