Status: NEW | Advisory ID: CVE-2025-59172
| CVE | CVE-2025-59172 |
| CVSS Score / Version | 8.5 (High) / CVSS v4.0 |
| Updated | 2026-07-28 |
| Classified as | CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')) |
Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2025-59172 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2025-59172 |