Log in Start free

Ericsson

Products

ProductCVEsExploitedLatest
CodeChecker10–Aug 28, 2026
Indoor Connect 88558–Mar 25, 2026
Packet Core Controller (PCC)5–Jul 27, 2026
Site Controller 66103–Oct 13, 2025
Packet Core Controller3–Jun 5, 2026
Packet Core Gateway (PCG)3–Jun 5, 2026
Ericsson RAN Compute Basebands (all BB variants)2–May 22, 2025
Ericsson Network Manager(ENM)2–Oct 13, 2025
RAN Compute (all BB versions)1–Oct 13, 2025
Ericsson Network Manager1–Apr 4, 2024
Ericsson Catalog Manager1–Sep 18, 2025
Ericsson Order Care1–Sep 18, 2025
Ericsson Packet Core Controller (PCC)1–Jul 27, 2026

Exploited and recent CVEs

  • CVE-2026-58107 Medium 5.5 Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun 0.4%
  • CVE-2026-58106 Low 2.0 Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation 0.2%
  • CVE-2026-58108 Low 1.2 Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB 0.3%
  • CVE-2025-59181 Medium 4.8 Path traversal Vulnerability 0.4%
  • CVE-2025-59180 Medium 5.1 Use of Hard-coded Credentials Vulnerability 0.2%
  • CVE-2025-59178 Medium 4.8 Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability 0.2%
  • CVE-2025-59177 Medium 6.8 Generation of Error Message Containing Sensitive Information Vulnerability 0.2%
  • CVE-2025-59172 High 8.5 Improper Neutralization of Special Elements used in an OS Command Vulnerability 0.3%
  • CVE-2025-59174 Medium 6.5 Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation. 0.2%
  • CVE-2026-25659 High 7.1 Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability 0.2%
  • CVE-2026-25658 High 7.1 Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability 0.2%
  • CVE-2026-25657 High 7.1 Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability 0.2%
  • CVE-2026-25660 Critical 9.3 Authentication bypass for certain API calls 0.4%
  • CVE-2024-53828 Medium 5.3 Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability 0.4%
  • CVE-2025-40842 High 8.5 Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability 0.1%
  • CVE-2025-40841 Medium 5.1 Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability 0.1%
  • CVE-2025-27260 High 7.2 Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability 0.2%
  • CVE-2025-40843 Medium 5.9 Buffer overflow in CodeChecker log command 0.2%
  • CVE-2025-0636 High 8.4 Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller 0.3%
  • CVE-2025-0636 High 8.4 Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller 0.3%
  • CVE-2025-27258 Medium 6.9 Ericsson Network Manager: escalation of privilege vulnerability 0.3%
  • CVE-2025-27259 Low 2.4 Ericsson Network Manager: improper neutralization of user controlled input 0.2%
  • CVE-2025-40838 Medium 5.1 Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability 0.4%
  • CVE-2025-40837 High 8.7 Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability 0.3%
  • CVE-2025-40836 High 8.7 Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability 0.4%
  • CVE-2025-27262 High 8.5 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability 0.6%
  • CVE-2025-27261 High 8.7 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability 0.3%
  • CVE-2024-25011 Medium 5.3 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability 0.3%
  • CVE-2024-25011 Medium 5.3 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability 0.3%
  • CVE-2024-25010 High 8.8 Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability 0.3%