CVE-2025-59180CWE-798hardcoded-credentials

CVE-2025-59180

published July 27, 2026

CVSS
5.1
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.

The record
Technical detail
CVSS
5.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-07-27T19:16Z
References (1)
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
EPSS history
Timeline
  • 27 JUL 14:19Z
    Use of Hard-coded Credentials Vulnerability
    cvelistv5