CVE-2026-25659
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Jun 5, 2026
CISA due date
—
The record
Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-25658 Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of… CWE-230
- CVE-2026-20086 A vulnerability in the processing of Control and Provisioning of Wireless Access Points… CWE-230
- CVE-2026-1461 The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing… CWE-230