« Volver al listado

CVE-2026-40465

Estado: AplazadaMedia (5.3)—

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-40465",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-40465",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-08-31T15:32:50.443352Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "b48c3b8f-639e-4c16-8725-497bc411dad0",
      "affectedData": [
        {
          "vendor": "Nokia",
          "product": "NSP",
          "versions": [
            {
              "status": "affected",
              "version": "23.11"
            },
            {
              "status": "affected",
              "version": "24.4"
            },
            {
              "status": "affected",
              "version": "24.8"
            },
            {
              "status": "affected",
              "version": "24.11"
            },
            {
              "status": "affected",
              "version": "25.4"
            },
            {
              "status": "affected",
              "version": "25.8"
            },
            {
              "status": "affected",
              "version": "25.11"
            },
            {
              "status": "unaffected",
              "version": "NSP 24.11-SP15"
            },
            {
              "status": "unaffected",
              "version": "NSP 25.11-SP5"
            },
            {
              "status": "unaffected",
              "version": "NSP 26.4 and later"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-08-31T07:17:43.857",
  "references": [
    {
      "url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-40465/",
      "source": "b48c3b8f-639e-4c16-8725-497bc411dad0"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter."
    }
  ],
  "lastModified": "2026-09-03T18:12:39.113",
  "sourceIdentifier": "b48c3b8f-639e-4c16-8725-497bc411dad0"
}