CVE-2025-59172

UNKNOWN 0.0

Improper Neutralization of Special Elements used in an OS Command Vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

CWE	CWE-78
Vendor	ericsson
Product	packet core controller (pcc)
Published	Jul 27, 2026
Last Updated	Jul 27, 2026

Stay Ahead of the Next One

Get instant alerts for ericsson packet core controller (pcc)

Be the first to know when new unknown vulnerabilities affecting ericsson packet core controller (pcc) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Ericsson / Packet Core Controller (PCC)

0 < 1.38

References

NVD ↗ CVE.org ↗ EPSS Data ↗

ericsson.com: https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026

Credits

Spark NZ Radu Balaci and Meghna Patel from Bell Mobility (Canada)