Back to Database
Status published
Unknown
CVE-2025-0980
JSON RPC authentication bypass in Nokia SR Linux
Vulnerability Description
Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0980
Credits & Attribution
No credits recorded in the NVD database.
More from Nokia
View All →CVE-2025-9974
Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product
Unknown
0
CVE-2025-9912
A local privilege escalation vulnerability in Nokia SR Linux
Unknown
0
CVE-2025-7406
A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM
Unknown
0
CVE-2025-24938
Insufficient Validation of Input while user creation
Unknown
0
CVE-2025-24937
Access to local file system and its content
Unknown
0
Affected Vendor
Nokia
View all reports →Affected Software
SR Linux
Vulnerable Versions:
<23.10.6, <24.10.2, 23.10.6 and onwards, 24.10.2 and onwards
Timeline
Official Publish:
January 7th, 2026
Last Modified:
January 7th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.