CVE-2025-27258: Ericsson Network Manager

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege.

Affected products

• Ericsson Network Manager: before 25.1 (fixed in 25.1)

Published 2025-10-13. Last modified 2026-10-08.