CVEs we hold for Ericsson

Records whose assigning authority named Ericsson as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-58108Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDBEricsson CodeChecker

CVE-2026-58107Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRunEricsson CodeChecker

CVE-2026-58106Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer…Ericsson CodeChecker

CVE-2026-25660Authentication bypass for certain API callsEricsson CodeChecker

CVE-2026-25659Ericsson Packet Core Gateway (PCG) - Improper handling of missing values VulnerabilityEricsson Packet Core Gateway (PCG)

CVE-2026-25658Ericsson Packet Core Gateway (PCG) - Improper handling of missing values VulnerabilityEricsson Packet Core Gateway (PCG)

CVE-2026-25657Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure VulnerabilityEricsson Packet Core Gateway (PCG)

CVE-2025-59181Path traversal VulnerabilityEricsson Packet Core Controller (PCC)

CVE-2025-59180Use of Hard-coded Credentials VulnerabilityEricsson Packet Core Controller (PCC)

CVE-2025-59178Exposure of Sensitive System Information to an Unauthorized Control Sphere VulnerabilityEricsson Packet Core Controller (PCC)

CVE-2025-59177Generation of Error Message Containing Sensitive Information VulnerabilityEricsson Packet Core Controller (PCC)

CVE-2025-59174no title heldEricsson Packet Core Controller

CVE-2025-59172Improper Neutralization of Special Elements used in an OS Command VulnerabilityEricsson Packet Core Controller (PCC)

CVE-2025-40843Buffer overflow in CodeChecker log commandEricsson CodeChecker

CVE-2025-40842Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation VulnerabilityEricsson Indoor Connect 8855

CVE-2025-40841Ericsson Indoor Connect 8855 - Cross-Site Request Forgery VulnerabilityEricsson Indoor Connect 8855

CVE-2025-40838Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials VulnerabilityEricsson Indoor Connect 8855

CVE-2025-40837Ericsson Indoor Connect 8855 - Missing Authorization VulnerabilityEricsson Indoor Connect 8855

CVE-2025-40836Ericsson Indoor Connect 8855 - Improper Input Validation VulnerabilityEricsson Indoor Connect 8855

CVE-2025-27262Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command VulnerabilityEricsson Indoor Connect 8855

CVE-2025-27261Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command VulnerabilityEricsson Indoor Connect 8855

CVE-2025-27260Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements VulnerabilityEricsson Indoor Connect 8855

CVE-2025-27259Ericsson Network Manager: improper neutralization of user controlled inputEricsson Network Manager(ENM)

CVE-2025-27258Ericsson Network Manager: escalation of privilege vulnerabilityEricsson Network Manager(ENM)

CVE-2025-1300Open redirect in CodeChecker web serverEricsson CodeChecker

CVE-2025-0636Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site ControllerEricsson RAN Compute (all BB versions)

CVE-2024-53829Cross-Site Request Forgery in CodeChecker APIEricsson CodeChecker

CVE-2024-53828Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure VulnerabilityEricsson Packet Core Controller (PCC)

CVE-2024-53827Ericsson Packet Core Controller (PCC) - Improper Input Validation VulnerabilityEricsson Packet Core Controller

CVE-2024-25011Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information VulnerabilityEricsson Order Care

CVE-2024-25010Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation VulnerabilityEricsson Site Controller 6610

CVE-2024-25009Ericsson Packet Core Controller (PCC) - Improper Input Validation VulnerabilityEricsson Packet Core Controller

CVE-2024-25008Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation VulnerabilityEricsson Site Controller 6610

CVE-2024-25007Ericsson Network Manager - Improper Neutralization of Formula Elements VulnerabilityEricsson Network Manager

CVE-2024-10082no title heldEricsson CodeChecker

CVE-2024-10081no title heldEricsson CodeChecker

CVE-2023-49793Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`Ericsson codechecker

CVE-2020-7824Ericssonlg iPECS Privilege Escalation VulnerabilityEricsson-LG iPCES UCM

38 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.