CVE-2025-27260

7.2 highEPSS 0.2%

High (7.2) in ericsson indoor connect 8855 firmware. EPSS 0.2% chance of exploitation in the next 30 days.

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unauthorized modification of certain information

Severity

CVSS 4.0

7.2 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-790
Published: 2026-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ericsson:indoor_connect_8855_firmware

References

https://www.ericsson.com/en/about-us/security/psirt/CVE-2025-27260
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-indoorconnect-march-2026

Check your stack JSON