{"id":"CVE-2026-34485","title":"A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)","summary":"Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH…","severity":"none","vendor":"Nokia","product":"Nokia 1830 Global Express (GX)","affected":["1830_global_express_gx G42, GX G31, GX G32, GX G34 releases prior to GX r9.0"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T12:13:17.792Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-34485","references":[{"url":"https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34485/","label":"Nokia Product Security Advisory"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T13:07:11.084Z","slug":"CVE-2026-34485","body":"## Overview\n\nNokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.\n\n## Affected\n\n- `1830_global_express_gx G42, GX G31, GX G32, GX G34 releases prior to GX r9.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}