Ericsson vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 202514
3. 202620

Newest CVEs

• CVE-2026-84161

  Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics

  Ericsson · CodeChecker

  Medium4.9
• CVE-2026-84164

  Stored XSS in the static HTML report export, because json.dumps does not escape the markup character

  Ericsson · CodeChecker

  None0.0
• CVE-2026-84155

  Session Token Remains Valid After Logout in Multi-Worker Deployments

  Ericsson · CodeChecker

  Medium5.3
• CVE-2026-58107

  Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun

  Ericsson · CodeChecker

  Medium5.5
• CVE-2026-58106

  Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation

  Ericsson · CodeChecker

  Low2.0
• CVE-2026-58108

  Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB

  Ericsson · CodeChecker

  Low1.2
• CVE-2025-59181

  Path traversal Vulnerability

  Ericsson · Packet Core Controller (PCC)

  Medium4.8
• CVE-2025-59180

  Use of Hard-coded Credentials Vulnerability

  Ericsson · Packet Core Controller (PCC)

  Medium5.1
• CVE-2025-59178

  Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability

  Ericsson · Packet Core Controller (PCC)

  Medium4.8
• CVE-2025-59177

  Generation of Error Message Containing Sensitive Information Vulnerability

  Ericsson · Ericsson Packet Core Controller (PCC)

  Medium6.8