CVE-2025-24816

mediumCVSS 6.5covered by 1 sourcefirst seen 2026-06-30

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.

⚡ Watch CVE-2025-24816

Get an email if CVE-2025-24816 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all EPSS-scored CVEs.

Advisory coverage (1)

mediumCVE-2025-24816: Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient auth…nvd · 2026-06-30

External references

NVD record for CVE-2025-24816

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2025-24816 status](https://www.csirts.com/badge/CVE-2025-24816)](https://www.csirts.com/cve/CVE-2025-24816)