What is GHSA-5p28-qfxx-wqm8?

GHSA-5p28-qfxx-wqm8 is a security advisory published by GitHub Security Advisories with High severity. Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing...

Which CVE IDs does GHSA-5p28-qfxx-wqm8 cover?

GHSA-5p28-qfxx-wqm8 covers the following CVE IDs: CVE-2026-25658. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5p28-qfxx-wqm8?

GHSA-5p28-qfxx-wqm8 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-5p28-qfxx-wqm8HighCVSS 6.5

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing...

Vendor

GitHub Security Advisories

Published

June 5, 2026

Last Modified

June 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-25658 →

📋 Description

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-25658
https://www.ericsson.com/en/about-us/security/psirt/cve-2026-25658
https://github.com/advisories/GHSA-5p28-qfxx-wqm8