CVE-2025-27260: Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-03-25 · updated 2026-06-17
Weakness: CWE-790

Description

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unauthorized modification of certain information

Affected products

Ericsson Indoor Connect 8855: before 2025.q3 — fixed in 2025.q3

How to fix

Upgrade to a fixed version: Ericsson Indoor Connect 8855 2025.q3. Check the vendor advisory for mitigations.

References

https://www.ericsson.com/en/about-us/security/psirt/CVE-2025-27260
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-indoorconnect-march-2026

Get alerted when CVE-2025-27260 or the next vulnerability affects your stack