PT-2026-64915 · Ericsson · Packet Core Controller

Spark Nz · CVE-2025-59172 · Published 2026-07-27 · Updated 2026-07-27

Mitre

CVSS v4.0

8.5

High

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-59172

Affected Products

Packet Core Controller

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-59172 · Security Note
• https://ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · Note