CVE-2025-59178 — Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability

CVE-2025-59178

Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability PUBLISHED

Description (CNA)

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.

Affected (CNA)

Vendor / product	Versions
Ericsson / Packet Core Controller (PCC)	affected 0 before 1.39

CWE

CWE-497

References

https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.