MeldSecurity
Press Enter to search
CVE Database & Search →
Sign In Get Started

CVE-2025-9974

🔴 HIGH

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validat...

Published
Feb 02, 2026
Last Modified
Feb 03, 2026
Views
1
Bookmarks
0

Description

Request Expert Review

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitrary commands on the underlying ONT/Beacon operating system, potentially impacting the confidentiality, integrity, and availability of the device.

CVSS Scores

CVSS 3.1 8.0
8.0
HIGH
CVSS 2.0 8.0

References

www.nokia.com

Additional Information

Source
b48c3b8f-639e-4c16-8725-497bc411dad0
State
Awaiting analysis

Related CVEs

CVE-2026-2135

MEDIUM

A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_43F020 of the file /goform/formPdbUpConfig. Perfo...

Score: 6.3

CVE-2026-2134

MEDIUM

A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/...

Score: 4.7

CVE-2026-2133

HIGH

A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminUpdateCateg...

Score: 7.3

CVE-2026-2132

HIGH

A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/...

Score: 7.3

CVE-2026-2131

MEDIUM

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function input_text. The manipulation of the...

Score: 6.3

CVE-2026-2130

MEDIUM

A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.12. This affects an unknown part of the file src/index.ts of the component search...

Score: 6.3

Share CVE-2025-9974

Share on Social Media

Copy Link

Embed Code

Request Expert Analysis

Request a professional security analysis for CVE-2025-9974 from our verified experts.

Credits System

Use your credits to get expert analysis from verified security professionals. Purchase more credits anytime!

Add 3 credits for accelerated delivery

Base Cost: 8 credits
Priority Upgrade: + credits
SLA Acceleration: +3 credits
Total Cost:
Your Balance:

Insufficient Credits

You need more credits to submit this request.

Buy Credits

Report Analysis