AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

EricssonCVE-2025-59172

Ericsson Packet Core Controller (PCC): code execution

Ericsson

CVE-2025-59172 · Published Jul 27, 2026 · updated Sep 29, 2026

High8.5
Fix: upgrade to 1.38 or later
Ericsson advisory

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

Affected versions

PackageAffectedFixed in
Packet Core Controller (PCC)
Product
< 1.381.38
Details and references
CVSS 4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Ericsson advisories

All Ericsson
Medium 5.5Aug 28Ericsson CodeChecker: denial of serviceCVE-2026-58107fixed in 6.28.3Low 1.2Aug 26Ericsson CodeChecker: improper access controlCVE-2026-58108fixed in 6.28.3Medium 4.8Jul 27Ericsson Packet Core Controller (PCC): system information exposureCVE-2025-59178fixed in 1.39Medium 5.1Jul 27Ericsson Packet Core Controller (PCC): hard-coded credentialsCVE-2025-59180fixed in 1.38Medium 4.8Jul 27Ericsson Packet Core Controller (PCC): path traversalCVE-2025-59181fixed in 1.39Medium 6.8Jul 27Ericsson Packet Core Controller (PCC): information disclosure in errorsCVE-2025-59177fixed in 1.39