Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2026-40463

An Insufficient Role-based Access Control Vulnerability in WaveSuite

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Nokia

Description

WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nokia WaveSuite

  • 25.6affected
  • 24.12affected
  • 24.6affected
  • 23.6affected
  • 25.12FP1 and laterunaffected

References