CVE-2025-59181CWE-35

CVE-2025-59181

published July 27, 2026

CVSS
4.8
EPSS
0%
Percentile
36.3
In the wild
Unconfirmed
What it is

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users.

The record
Technical detail
CVSS
4.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.3th percentile
Weakness
CWE-35 · Path Traversal: '.../...//'
Published
2026-07-27T19:16Z
References (1)
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
EPSS history
Timeline
  • 27 JUL 14:21Z
    Path traversal Vulnerability
    cvelistv5