Ericsson vulnerabilities
40 CVEs and advisories name Ericsson as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-84161Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics
- CVE-2026-84164Stored XSS in the static HTML report export, because json.dumps does not escape the markup character
- CVE-2026-84155Session Token Remains Valid After Logout in Multi-Worker Deployments
- CVE-2026-58107Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun
- CVE-2026-58106Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation
- CVE-2026-58108Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB
- CVE-2025-59181Path traversal Vulnerability
- CVE-2025-59180Use of Hard-coded Credentials Vulnerability
- CVE-2025-59178Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability
- CVE-2025-59177Generation of Error Message Containing Sensitive Information Vulnerability
- CVE-2025-59172Improper Neutralization of Special Elements used in an OS Command Vulnerability
- CVE-2025-59174Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially c
- CVE-2026-25659Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
- CVE-2026-25658Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
- CVE-2026-25657Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability
- CVE-2026-25660Authentication bypass for certain API calls
- CVE-2024-53828Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability
- CVE-2025-40842Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability
- CVE-2025-40841Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability
- CVE-2025-27260Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability
- CVE-2025-40843Buffer overflow in CodeChecker log command
- CVE-2025-0636Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller
- CVE-2025-27258Ericsson Network Manager: escalation of privilege vulnerability
- CVE-2025-27259Ericsson Network Manager: improper neutralization of user controlled input
- CVE-2025-40838Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability
- CVE-2025-40837Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability
- CVE-2025-40836Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
- CVE-2025-27262Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability
- CVE-2025-27261Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability
- CVE-2024-25011Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability