CVE-2025-59178CWE-497

CVE-2025-59178

published July 27, 2026

CVSS
4.8
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.

The record
Technical detail
CVSS
4.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.1th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-07-27T19:16Z
References (1)
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
EPSS history
Timeline
  • 27 JUL 14:15Z
    Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability
    cvelistv5