CVE-2025-59181

Description

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users.

References

• https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026