The vulnerability CVE-2026-25658 affects Ericsson Packet Core Gateway (PCG) versions before 1.30. It is classified as CWE-230, indicating improper handling of missing values. An attacker can exploit this by sending a continuous stream of specially crafted messages, leading to service degradation. The impact is temporary and ceases when the attack stops. The CVSS 4.0 score is 7.1, reflecting a high severity with attack vector being adjacent network and no privileges or user interaction required. No patch or official remediation guidance is currently available from the vendor.

The vulnerability causes service degradation in affected Ericsson PCG systems while under attack. The system recovers automatically once the attack stops. There is no indication of data compromise or persistent system damage. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level has been published, monitor vendor communications for updates. Until a fix is available, consider limiting exposure of the affected PCG interfaces to untrusted networks to reduce risk of exploitation.