High severity · published Mar 25, 2026
CVE-2025-27260
Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability
7.5
CVSS
0.2%
EPSS
No
On KEV
Description
Ericsson
Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special
Elements vulnerability which, if exploited, can lead to unauthorized
modification of certain information
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Indoor Connect 8855 · Ericsson
before 2025.Q3 · source: vendor
IC
Indoor Connect 8855 Firmware · Ericsson
before 2025.q3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-27260
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-27260
Vendor Advisory
https://www.ericsson.com/en/about-us/security/psirt/CVE-2025-27260
Vendor Advisory
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-indoorconnect-march-2026
More from Indoor Connect 8855
9.8
CVE-2025-40836
Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
9.8
CVE-2025-27261
Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability
8.8
CVE-2025-40837
Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability
7.8
CVE-2025-27262
Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability
7.5
CVE-2025-40838
Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability