Vulnerability · Published Jun 5, 2026 · Assigned by ERIC
CVE-2026-25657Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability
High 7.1
In plain English
A high-severity security flaw in Packet Core Gateway (PCG) from Ericsson. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Official description
Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ericsson | Packet Core Gateway (PCG) | 0 – before 1.30 |
Weakness: CWE-228 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N