Skip to content
OpenAdvisories

Vendor

Ericsson

40 known vulnerabilities.

Products

CodeChecker 13 Indoor Connect 8855 8 Packet Core Controller (PCC) 5 Packet Core Gateway (PCG) 3 Site Controller 6610 3 Packet Core Controller 3 Ericsson Network Manager(ENM) 2 Ericsson RAN Compute Basebands (all BB variants) 2 RAN Compute (all BB versions) 1 Ericsson Packet Core Controller (PCC) 1 Ericsson Catalog Manager 1 Ericsson Order Care 1 Ericsson Network Manager 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-58106

    Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation

    CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the …

    Ericsson CodeChecker
  • Low 1.2
    CVE-2026-58108

    Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB

    The personal access token removal query selects from PersonalAccessTokenDB but filters on columns of Session, with no join between them. SQLAlchemy resolves that as an implicit cross join, so the filter does not constrain the delete to the calling user's own …

    Ericsson CodeChecker
  • Low 2.4
    CVE-2025-27259

    Ericsson Network Manager: improper neutralization of user controlled input

    Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.

    Ericsson Ericsson Network Manager(ENM)