CVE-2026-40465 PUBLISHED

An Open Re-direct Vulnerability in Nokia NSP

Assigner: Nokia
Reserved: 13.04.2026 Published: 31.08.2026 Updated: 31.08.2026

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.

Product Status

Vendor Nokia
Product NSP
Versions
  • Version 23.11 is affected
  • Version 24.4 is affected
  • Version 24.8 is affected
  • Version 24.11 is affected
  • Version 25.4 is affected
  • Version 25.8 is affected
  • Version 25.11 is affected
  • Version NSP 24.11-SP15 is unaffected
  • Version NSP 25.11-SP5 is unaffected
  • Version NSP 26.4 and later is unaffected

References