CVE-2025-27260

EUVD-2025-208979
Ericsson
Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special
Elements vulnerability which, if exploited, can lead to unauthorized
modification of certain information
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
ericssonindoor_connect_8855_firmware
𝑥
< 2025.q3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.ericsson.com/en/about-us/security/psirt/CVE-2025-27260
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-indoorconnect-march-2026