CVE-2026-25657
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Jun 5, 2026
CISA due date
—
The record
Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87986 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CWE-228
- CVE-2025-59174 Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability… CWE-228
- CVE-2026-42100 Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows… CWE-228
- CVE-2026-34232 Firebird is an open-source relational database management system. CWE-228
- CVE-2026-20125 A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE… CWE-228