MEDIUM
An Open Re-direct Vulnerability in Nokia NSP
Published Aug 31, 2026
5.3
MEDIUMCVSS 3.1
EPSS 0.28%
Description
NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.
Affected products
-
- Version 23.11StatusaffectedConstraints-
- Version 24.11StatusaffectedConstraints-
- Version 24.4StatusaffectedConstraints-
- Version 24.8StatusaffectedConstraints-
- Version 25.11StatusaffectedConstraints-
- Version 25.4StatusaffectedConstraints-
- Version 25.8StatusaffectedConstraints-
- Version NSP 24.11-SP15StatusunaffectedConstraints-
- Version NSP 25.11-SP5StatusunaffectedConstraints-
- Version NSP 26.4 and laterStatusunaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Nokia
Published Aug 31, 2026
Updated Aug 31, 2026
Reserved Apr 13, 2026
Link CVE-2026-40465
CISA Vulnrichment
Updated Aug 31, 2026
ENISA EUVD
EUVD-2026-68374 Assigner Nokia
Published Aug 31, 2026
Updated Aug 31, 2026
Exploited since n/a
Link EUVD-2026-68374