# cve.now: Ericsson

The newest entries naming Ericsson as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-84161](https://cve.now/CVE-2026-84161.md): Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics (CVSS 4.9)
- [CVE-2026-84164](https://cve.now/CVE-2026-84164.md): Stored XSS in the static HTML report export, because json.dumps does not escape the markup character (CVSS 0.0)
- [CVE-2026-84155](https://cve.now/CVE-2026-84155.md): Session Token Remains Valid After Logout in Multi-Worker Deployments (CVSS 5.3)
- [CVE-2026-58107](https://cve.now/CVE-2026-58107.md): Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun (CVSS 5.5)
- [CVE-2026-58106](https://cve.now/CVE-2026-58106.md): Incomplete fix for CVE-2025-40843: safe\_strcpy is called with PATH\_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation (CVSS 2.0)
- [CVE-2026-58108](https://cve.now/CVE-2026-58108.md): Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB (CVSS 1.2)
- [CVE-2025-59181](https://cve.now/CVE-2025-59181.md): Path traversal Vulnerability (CVSS 4.8)
- [CVE-2025-59180](https://cve.now/CVE-2025-59180.md): Use of Hard-coded Credentials Vulnerability (CVSS 5.1)
- [CVE-2025-59178](https://cve.now/CVE-2025-59178.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability (CVSS 4.8)
- [CVE-2025-59177](https://cve.now/CVE-2025-59177.md): Generation of Error Message Containing Sensitive Information Vulnerability (CVSS 6.8)
- [CVE-2025-59172](https://cve.now/CVE-2025-59172.md): Improper Neutralization of Special Elements used in an OS Command Vulnerability (CVSS 8.5)
- [CVE-2025-59174](https://cve.now/CVE-2025-59174.md): Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially c (CVSS 7.1)
- [CVE-2026-25659](https://cve.now/CVE-2026-25659.md): Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability (CVSS 7.1)
- [CVE-2026-25658](https://cve.now/CVE-2026-25658.md): Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability (CVSS 7.1)
- [CVE-2026-25657](https://cve.now/CVE-2026-25657.md): Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability (CVSS 7.1)
- [CVE-2026-25660](https://cve.now/CVE-2026-25660.md): Authentication bypass for certain API calls (CVSS 9.3)
- [CVE-2024-53828](https://cve.now/CVE-2024-53828.md): Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability (CVSS 5.3)
- [CVE-2025-40842](https://cve.now/CVE-2025-40842.md): Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability (CVSS 8.5)
- [CVE-2025-40841](https://cve.now/CVE-2025-40841.md): Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability (CVSS 5.1)
- [CVE-2025-27260](https://cve.now/CVE-2025-27260.md): Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability (CVSS 7.2)
- [CVE-2025-40843](https://cve.now/CVE-2025-40843.md): Buffer overflow in CodeChecker log command (CVSS 5.9)
- [CVE-2025-0636](https://cve.now/CVE-2025-0636.md): Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller (CVSS 8.4)
- [CVE-2025-27258](https://cve.now/CVE-2025-27258.md): Ericsson Network Manager: escalation of privilege vulnerability (CVSS 6.9)
- [CVE-2025-27259](https://cve.now/CVE-2025-27259.md): Ericsson Network Manager: improper neutralization of user controlled input (CVSS 2.4)
- [CVE-2025-40838](https://cve.now/CVE-2025-40838.md): Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability (CVSS 5.1)
- [CVE-2025-40837](https://cve.now/CVE-2025-40837.md): Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability (CVSS 8.7)
- [CVE-2025-40836](https://cve.now/CVE-2025-40836.md): Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability (CVSS 8.7)
- [CVE-2025-27262](https://cve.now/CVE-2025-27262.md): Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability (CVSS 8.5)
- [CVE-2025-27261](https://cve.now/CVE-2025-27261.md): Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability (CVSS 8.7)
- [CVE-2024-25011](https://cve.now/CVE-2024-25011.md): Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability (CVSS 5.3)
- [CVE-2024-25010](https://cve.now/CVE-2024-25010.md): Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability (CVSS 8.8)
- [CVE-2024-53827](https://cve.now/CVE-2024-53827.md): Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability (CVSS 7.5)
- [CVE-2025-1300](https://cve.now/CVE-2025-1300.md): Open redirect in CodeChecker web server (CVSS 6.1)
- [CVE-2024-53829](https://cve.now/CVE-2024-53829.md): Cross-Site Request Forgery in CodeChecker API (CVSS 8.2)
- [CVE-2024-10082](https://cve.now/CVE-2024-10082.md): CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. (CVSS 8.7)
- [CVE-2024-10081](https://cve.now/CVE-2024-10081.md): CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. (CVSS 10.0)
- [CVE-2024-25009](https://cve.now/CVE-2024-25009.md): Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability (CVSS 6.5)
- [CVE-2024-25008](https://cve.now/CVE-2024-25008.md): Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability (CVSS 6.8)
- [CVE-2023-49793](https://cve.now/CVE-2023-49793.md): Path traversal in \`CodeChecker server\` in the endpoint of \`CodeChecker store\` (CVSS 6.5)
- [CVE-2024-25007](https://cve.now/CVE-2024-25007.md): Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability (CVSS 7.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ericsson
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.