# Ericsson vulnerabilities Source: https://junglewise.ai/threats/vendors/ericsson Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/ericsson.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 16 vulnerabilities in Ericsson: 3 in the last 7 days and 3 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-84164, was published on 6 November 2026. 3 vulnerabilities in the last four weeks, up from none in the four before. 3 technologies have a page of their own. ## Counts - Last 7 days: 3 - Last 30 days: 3 - Last 90 days: 3 - All time: 16 (2 critical, 0 exploited in the wild) ## About Ericsson A multinational networking and telecommunications company headquartered in Stockholm, Sweden. ## Latest Ericsson vulnerabilities - [CVE-2026-84164: CodeChecker stored XSS in HTML report export](https://junglewise.ai/threats/cve-2026-84164-the-html-report-that-plist-to-html-codechecker-parse-export-html) (info, published 6 Nov 2026) - [CVE-2026-84161: Ericsson CodeChecker unbounded zlib decompression in storeAnalysisStatistics](https://junglewise.ai/threats/cve-2026-84161-when-an-operator-enables-store-analysis-statistics-dir-a-network) (medium, CVSS 4.9, published 6 Nov 2026) - [CVE-2026-84155: CodeChecker session token remains valid after logout](https://junglewise.ai/threats/cve-2026-84155-codechecker-s-web-server-fails-to-fully-invalidate-a-session) (info, published 6 Nov 2026) - [CVE-2025-59181: Ericsson Packet Core Controller directory traversal in Configuration Management](https://junglewise.ai/threats/cve-2025-59181-ericsson-packet-core-controller-directory-traversal-in) (info, CVSS 4.8, published 27 Jul 2026) - [CVE-2025-59180: Ericsson Packet Core Controller hardcoded credentials in alarm system](https://junglewise.ai/threats/cve-2025-59180-ericsson-packet-core-controller-hardcoded-credentials-in-alarm) (info, CVSS 5.1, published 27 Jul 2026) - [CVE-2025-59178: Ericsson Packet Core Controller information exposure in Configuration Management](https://junglewise.ai/threats/cve-2025-59178-ericsson-packet-core-controller-information-exposure-in) (info, CVSS 4.8, published 27 Jul 2026) - [CVE-2025-59177: Ericsson Packet Core Controller information disclosure in Configuration Management](https://junglewise.ai/threats/cve-2025-59177-ericsson-packet-core-controller-information-disclosure-in) (info, CVSS 6.8, published 27 Jul 2026) - [CVE-2025-59172: Ericsson Packet Core Controller OS command injection](https://junglewise.ai/threats/cve-2025-59172-ericsson-packet-core-controller-os-command-injection) (info, CVSS 8.5, published 27 Jul 2026) - [CVE-2025-59174: Ericsson Packet Core Controller denial of service via malformed messages](https://junglewise.ai/threats/cve-2025-59174-ericsson-packet-core-controller-denial-of-service-via-malformed) (medium, CVSS 6.5, published 5 Jun 2026) - [CVE-2026-25659: Ericsson Packet Core Gateway denial of service via improper handling of missing values](https://junglewise.ai/threats/cve-2026-25659-ericsson-packet-core-gateway-denial-of-service-via-improper) (info, CVSS 7.1, published 5 Jun 2026) - [CVE-2026-25658: Ericsson Packet Core Gateway improper handling of missing values](https://junglewise.ai/threats/cve-2026-25658-ericsson-packet-core-gateway-improper-handling-of-missing-values) (info, CVSS 7.1, published 5 Jun 2026) - [CVE-2026-25657: Ericsson Packet Core Gateway denial of service via malformed messages](https://junglewise.ai/threats/cve-2026-25657-ericsson-packet-core-gateway-denial-of-service-via-malformed) (info, CVSS 7.1, published 5 Jun 2026) - [CVE-2026-25660: Codechecker has an authentication bypass for certain API calls](https://junglewise.ai/threats/cve-2026-25660-codechecker-has-an-authentication-bypass-for-certain-api-calls) (critical, CVSS 9.8, published 24 Apr 2026) - [CVE-2025-40843: Ericsson CodeChecker stack overflow in ldlogger library](https://junglewise.ai/threats/cve-2025-40843-ericsson-codechecker-stack-overflow-in-ldlogger-library) (medium, CVSS 5.9, published 28 Oct 2025) - [CVE-2025-27259: Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate…](https://junglewise.ai/threats/cve-2025-27259-ericsson-network-manager-versions-prior-to-enm-25-2-ga-contain-a) (medium, CVSS 5.4, published 13 Oct 2025) - [CVE-2025-27258: Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an…](https://junglewise.ai/threats/cve-2025-27258-ericsson-network-manager-enm-versions-prior-to-enm-25-1-ga) (critical, CVSS 9.8, published 13 Oct 2025) ## Most severe Ericsson vulnerabilities - [CVE-2026-25660: Codechecker has an authentication bypass for certain API calls](https://junglewise.ai/threats/cve-2026-25660-codechecker-has-an-authentication-bypass-for-certain-api-calls) (critical, CVSS 9.8, published 24 Apr 2026) - [CVE-2025-27258: Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an…](https://junglewise.ai/threats/cve-2025-27258-ericsson-network-manager-enm-versions-prior-to-enm-25-1-ga) (critical, CVSS 9.8, published 13 Oct 2025) - [CVE-2025-59174: Ericsson Packet Core Controller denial of service via malformed messages](https://junglewise.ai/threats/cve-2025-59174-ericsson-packet-core-controller-denial-of-service-via-malformed) (medium, CVSS 6.5, published 5 Jun 2026) - [CVE-2025-40843: Ericsson CodeChecker stack overflow in ldlogger library](https://junglewise.ai/threats/cve-2025-40843-ericsson-codechecker-stack-overflow-in-ldlogger-library) (medium, CVSS 5.9, published 28 Oct 2025) - [CVE-2025-27259: Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate…](https://junglewise.ai/threats/cve-2025-27259-ericsson-network-manager-versions-prior-to-enm-25-2-ga-contain-a) (medium, CVSS 5.4, published 13 Oct 2025) - [CVE-2026-84161: Ericsson CodeChecker unbounded zlib decompression in storeAnalysisStatistics](https://junglewise.ai/threats/cve-2026-84161-when-an-operator-enables-store-analysis-statistics-dir-a-network) (medium, CVSS 4.9, published 6 Nov 2026) - [CVE-2025-59172: Ericsson Packet Core Controller OS command injection](https://junglewise.ai/threats/cve-2025-59172-ericsson-packet-core-controller-os-command-injection) (info, CVSS 8.5, published 27 Jul 2026) - [CVE-2026-25659: Ericsson Packet Core Gateway denial of service via improper handling of missing values](https://junglewise.ai/threats/cve-2026-25659-ericsson-packet-core-gateway-denial-of-service-via-improper) (info, CVSS 7.1, published 5 Jun 2026) - [CVE-2026-25658: Ericsson Packet Core Gateway improper handling of missing values](https://junglewise.ai/threats/cve-2026-25658-ericsson-packet-core-gateway-improper-handling-of-missing-values) (info, CVSS 7.1, published 5 Jun 2026) - [CVE-2026-25657: Ericsson Packet Core Gateway denial of service via malformed messages](https://junglewise.ai/threats/cve-2026-25657-ericsson-packet-core-gateway-denial-of-service-via-malformed) (info, CVSS 7.1, published 5 Jun 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Ericsson technologies - [Ericsson Packet Core Controller](https://junglewise.ai/threats/technologies/packet-core-controller): 6 vulnerabilities - [Ericsson Codechecker](https://junglewise.ai/threats/technologies/ericsson-codechecker): 5 vulnerabilities - [Ericsson Packet Core Gateway](https://junglewise.ai/threats/technologies/packet-core-gateway): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Ericsson vulnerabilities", https://junglewise.ai/threats/vendors/ericsson, 9 November 2026.