CVE-2025-27260

Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability

State: Published
Severity: 7.2 High
Published: Mar 25, 2026
Updated: Mar 25, 2026
Reserved: Feb 21, 2025

Description

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unauthorized modification of certain information

Scores

CVSS	Score	Vector	Source
4.0	7.2 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N	ERIC

Weaknesses

CWE-790

Affected Products

Product	Versions
Indoor Connect 8855Ericsson	before 2025.Q3Affectedfrom 2025.Q3Not affected

References

https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-indoorconnect-march-2026
https://www.ericsson.com/en/about-us/security/psirt/CVE-2025-27260

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.