CVE-2026-40465

Nokia NSP is vulnerable to an open redirect caused by insufficient server-side validation of the URL (or redirect) parameter. An attacker could craft a link that appears to point to a trusted NSP URL but redirects the victim to an arbitrary external destination, potentially facilitating phishing ...

CVE-2026-40464

Nokia NSP is vulnerable to a stored cross-site scripting (XSS) flaw in its workflow application . The root cause is insufficient validation or encoding of user-controlled input. An authenticated attacker with access to the workflow application can embed malicious code that executes in the context...