CVE-2025-59172CWE-78command-injection

CVE-2025-59172

published July 27, 2026

CVSS
8.5
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

The record
Technical detail
CVSS
8.5 · NONE
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.8th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-07-27T19:16Z
References (1)
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
EPSS history
Timeline
  • 27 JUL 14:03Z
    Improper Neutralization of Special Elements used in an OS Command Vulnerability
    cvelistv5