CVE-2025-59177CWE-209

CVE-2025-59177

published July 27, 2026

CVSS
6.8
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.1th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-07-27T19:16Z
References (1)
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
EPSS history
Timeline
  • 27 JUL 14:11Z
    Generation of Error Message Containing Sensitive Information Vulnerability
    cvelistv5