These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A directory traversal vulnerability exists in Ericsson Packet Core Controller (PCC) versions prior to 1.39 in the Configuration Management component. This vulnerability could allow an attacker to change directory permissions, potentially denying access to legitimate users. The vulnerability has been identified in the Configuration Management component of Ericsson Packet Core Controller (PCC) versions prio [truncated]
CVE-2025-59180 is a hardcoded credential vulnerability in Ericsson Packet Core Controller (PCC) versions prior to 1.38. An attacker with access to the cluster and knowledge of the hardcoded credential can read alarm and alert information. This vulnerability exists in the alarm system of Ericsson Packet Core Controller (PCC). Defenders should assess exposure and implement compensating controls to prevent u [truncated]
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management, allowing an attacker to enumerate other users on the system. This vulnerability can lead to targeted attacks and compromise system security. Defenders should assess exposure and prioritize verification and remediation efforts. The CVE record and NVD en [truncated]
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages. The vulnerability is classified as a Configuration Management issue, which could lead to potential command execution and system secret disclosure. Defenders should assess the exposure [truncated]
Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability, allowing an attacker to execute arbitrary code as root. This high-severity issue requires immediate attention from administrators and security teams. The vulnerability's impact includes potential for arbitrary code execution as root, necessitating prompt assessment and patchin [truncated]
CVE-2025-59174 is a HIGH severity vulnerability in Ericsson's Packet Core Controller (PCC). Versions prior to 1.39 are affected. An attacker can cause service degradation by sending a large volume of specially crafted messages. The vulnerability was published on [cve-org](https://www.cve.org/CVERecord?id=CVE-2025-59174) on 2026-06-05 and last modified on 2026-06-08. For more information, see the [NVD deta [truncated]
CVE-2026-25659 is a HIGH severity vulnerability in Ericsson's Packet Core Gateway (PCG). Versions prior to 1.30 are affected by an Improper Handling of Missing Values (CWE-230) vulnerability. An attacker can cause service degradation by continuously sending specially crafted messages. The impact persists as long as the attack continues, but the system recovers when the attack stops. The CVSS score for thi [truncated]
CVE-2026-25658 is a HIGH-severity vulnerability in Ericsson's Packet Core Gateway (PCG) versions prior to 1.30. The issue is an Improper Handling of Missing Values (CWE-230) that can cause service degradation when an attacker continuously sends specially crafted messages. The impact persists as long as the attack continues but the system recovers once the attack stops.
CVE-2026-25657 is a HIGH severity vulnerability in Ericsson Packet Core Gateway (PCG) versions prior to 1.30. An attacker can cause service degradation by continuously sending specially crafted messages. The impact persists as long as the attack continues, but the system recovers when the attack stops.