Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-27262 | 8.5 high | 1.0% | ericsson, indoor_connect_8855_firmware | Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges. | 11 Oct |
| CVE-2025-27261 | 8.7 high | 0.00% | ericsson, indoor_connect_8855_firmware | Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data. | 11 Oct |
| CVE-2025-40836 | 8.7 high | 0.00% | ericsson, indoor_connect_8855_firmware | Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges. | 11 Oct |
| CVE-2025-40837 | 8.7 high | 0.00% | ericsson, indoor_connect_8855_firmware | Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended. | 11 Oct |
| CVE-2025-40838 | 5.1 medium | 0.00% | ericsson, indoor_connect_8855_firmware | Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information. | 11 Oct |
5 of 5
Download these 5 as CSV · subscribe to this list.
EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.