CVE-2025-59181 MEDIUM

CVE-2025-59181: Path traversal Vulnerability

Vendor Ericsson
Product Packet Core Controller (PCC)
Weakness CWE-35
Published July 27, 2026
Last update July 27, 2026

CVSS base score

4.8/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users.

Key dates

02Disclosure timeline

July 27, 2026 CVE published
July 27, 2026 Record updated