High · 8.7 CVE-2025-27261 EUVD-2025-31089GHSA-6g5r-cm79-8g3m

Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability

Published Sep 25, 2025 · Updated Sep 30, 2025 · Assigned by ERIC

Vendor: Ericsson Product: Indoor Connect 8855

Description

Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data.

Affected products

Vendor	Product	Affected	Fixed
Ericsson	Indoor Connect 8855	< 2025.Q2	2025.Q2

References

https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25