Vulnerability · Published Jun 5, 2026 · Assigned by ERIC
CVE-2026-25659Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
High 7.1
In plain English
A high-severity security flaw in Packet Core Gateway (PCG) from Ericsson. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 4.0)7.1High
Exploit odds (30 days)0.2%top 94.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ericsson | Packet Core Gateway (PCG) | 0 – before 1.30 |
Weakness: CWE-230 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N