CVE-2026-25657: Ericsson Packet Core Gateway

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.

Affected products

• Ericsson Packet Core Gateway: before 1.30 (fixed in 1.30)

Published 2026-06-05. Last modified 2026-06-17.