CVE-2025-59174: Ericsson Packet Core Controller

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.

Affected products

• Ericsson Packet Core Controller: before 1.39 (fixed in 1.39)

Published 2026-06-05. Last modified 2026-10-07.