CVE-2026-25658— Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Ericsson | Packet Core Gateway (PCG) | < 1.30 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-25658
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
缺失值处理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ericsson Packet Core Gateway 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ericsson Packet Core Gateway是瑞典爱立信（Ericsson）公司的一个面向移动通信核心网的数据分组网关平台。 Ericsson Packet Core Gateway 1.30之前版本存在安全漏洞，该漏洞源于对缺失值的处理不当，可能导致攻击者持续发送特制消息造成服务降级。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Ericsson | Packet Core Gateway (PCG) | 0 ~ 1.30 | - |
II. Public POCs for CVE-2026-25658
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-25658
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-25658 (1)
Same Patch Batch · Ericsson · 2026-06-05 · 4 CVEs total
| CVE-2025-59174 | 6.5 MEDIUM | Ericsson Packet Core Controller 安全漏洞 |
| CVE-2026-25657 | Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure | |
| CVE-2026-25659 | Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability |
IV. Related Vulnerabilities
Same vendor: Ericsson
- CVE-2025-59174
Ericsson Packet Core Controller 安全漏洞 - CVE-2026-25659
Ericsson Packet Core Gateway (PCG) - Improper handling of mi - CVE-2026-25657
Ericsson Packet Core Gateway (PCG) - Improper Handling of Sy - CVE-2026-25660
Authentication bypass for certain API calls - CVE-2024-53828
Ericsson Packet Core Controller (PCC) - Improper Handling of
Same weakness: CWE-230
- CVE-2026-25659
Ericsson Packet Core Gateway (PCG) - Improper handling of mi - CVE-2026-20086
Cisco IOS XE Wireless Controller software 安全漏洞 - CVE-2026-1461
Simple Membership <= 4.7.0 - Unauthenticated Improper Handli - CVE-2025-23225
IBM MQ denial of service - CVE-2024-11024
AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated
V. Comments for CVE-2026-25658
No comments yet