CVE-2025-59172

Improper Neutralization of Special Elements used in an OS Command Vulnerability PUBLISHED

Description (CNA)

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

Affected (CNA)

Vendor / product	Versions
Ericsson / Packet Core Controller (PCC)	affected 0 before 1.38

CWE

CWE-78

References

https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.