CVE-2025-40842

Publication date

2026-03-25 13:10:44

Family

ERIC

State

PUBLISHED

Description

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information.