CVE-2025-59178 MEDIUM

CVE-2025-59178: Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability

Vendor Ericsson

Product Packet Core Controller (PCC)

Weakness CWE-497

Published July 27, 2026

Last update July 27, 2026

View on NVD All CVEs

CVSS base score

4.8/10

Attack vector Adjacent

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.

Key dates

02Disclosure timeline

July 27, 2026 CVE published

July 27, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-59178 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/497.html AskarLabs — CWE-497 write-up Exposure of Sensitive System Information to an Unauthorized Control Sphere

Related vulnerabilities

04Related CVE

CVE-2026-24593 WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability CVE-2026-61945 WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability CVE-2026-65458 WordPress Polylang plugin <= 3.8.5 - Sensitive Data Exposure vulnerability CVE-2026-25023 WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin <= 2.0.7 - Sensitive Data Exposure vulnerability CVE-2026-39469 WordPress PageLayer plugin <= 2.0.8 - Sensitive Data Exposure vulnerability