Nokia 1830 GX CLI ACL Bypass via SSH Isolation Exploit
CVE-2026-34485 Published on October 20, 2026
A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.
Affected Versions
Nokia 1830 Global Express (GX):- Version G42, GX G31, GX G32, GX G34 releases prior to GX r9.0 is affected.
- Version r9.0 and later releases is unaffected.