CVE-2025-59172

Description

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

References

• https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026