CVE-2025-27261

Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - 85b1779b-6ecd-4f52-bcc5-73eac4659dcf

Published

2025-09-25

Last modified

2026-10-11

Weaknesses

CWE-89

Affected products

• Indoor Connect 8855 (Ericsson)
• Indoor Connect 8855 Firmware (Ericsson)

References

• https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25