Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
211 results · page 2 of 5
May 17, 2026A vulnerability was detected in Open5GS up to 2.7.7.CVE-2026-8729 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was detected in Open5GS up to 2.7.7. This affects an unknown function in the library /lib/sbi/message.c of the component NRF. Performing a manipulation of the argument service-names/snssais results in denial of service. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 17, 2026A security vulnerability has been detected in Open5GS up to 2.7.7.CVE-2026-8728 · Other software · Open5gs · reported by VulDBLow 2.1
A security vulnerability has been detected in Open5GS up to 2.7.7. The impacted element is the function ogs_sbi_discovery_option_parse_plmn_list in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argument target-plmn-list leads to denial of service. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A security vulnerability has been detected in Open5GS up to 2.7.7.CVE-2026-8292 · Other software · Open5gs · reported by VulDBLow 2.1
A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarel_parse in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argument hnrf-uri leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A weakness has been identified in Open5GS up to 2.7.7.CVE-2026-8291 · Other software · Open5gs · reported by VulDBLow 2.1
A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogs_nnrf_nfm_handle_nf_profile of the file lib/sbi/nnrf-handler.c of the component NRF. This manipulation causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A security flaw has been discovered in Open5GS up to 2.7.7.CVE-2026-8290 · Other software · Open5gs · reported by VulDBLow 2.1
A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A vulnerability was identified in Open5GS up to 2.7.7.CVE-2026-8289 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was identified in Open5GS up to 2.7.7. This vulnerability affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation of the argument qosFlowProfile leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A vulnerability was determined in Open5GS up to 2.7.7.CVE-2026-8288 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsm_handle_pdu_session_modification_qos_flow_descriptions of the file src/smf/gsm-handler.c of the component SMF. Executing a manipulation of the argument n1SmMsg can lead to denial of service. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A vulnerability was determined in Open5GS up to 2.7.7.CVE-2026-8270 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_nas_parse_qos_rules of the component SMF. Executing a manipulation can lead to denial of service. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A vulnerability was found in Open5GS up to 2.7.7.CVE-2026-8269 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function smf_nsmf_handle_create_sm_context of the component SMF. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A vulnerability has been found in Open5GS up to 2.7.7.CVE-2026-8268 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function OpenAPI_list_create of the component SMF. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A flaw has been found in Open5GS up to 2.7.7.CVE-2026-8267 · Other software · Open5gs · reported by VulDBLow 2.1
A flaw has been found in Open5GS up to 2.7.7. This vulnerability affects the function smf_nsmf_handle_created_data_in_vsmf of the component SMF. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2026A vulnerability was detected in Open5GS up to 2.7.7.CVE-2026-8266 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was detected in Open5GS up to 2.7.7. This affects the function gsm_build_pdu_session_establishment_accept of the file /src/smf/gsm-build.c of the component SMF. The manipulation results in denial of service. The attack can be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2026A vulnerability was determined in Open5GS up to 2.7.7.CVE-2026-8252 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function smf_nsmf_handle_create_data_in_hsmf of the component SMF. Executing a manipulation can lead to null pointer dereference. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2026A vulnerability was found in Open5GS up to 2.7.7.CVE-2026-8251 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was found in Open5GS up to 2.7.7. This impacts the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2026A vulnerability has been found in Open5GS up to 2.7.7.CVE-2026-8250 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability has been found in Open5GS up to 2.7.7. This affects the function smf_n4_build_qos_flow_to_modify_list of the file /src/smf/n4-build.c of the component SMF. Such manipulation leads to denial of service. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2026A flaw has been found in Open5GS up to 2.7.7.CVE-2026-8249 · Other software · Open5gs · reported by VulDBLow 2.1
A flaw has been found in Open5GS up to 2.7.7. The impacted element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. This manipulation causes denial of service. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2026A vulnerability was detected in Open5GS up to 2.7.7.CVE-2026-8248 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was detected in Open5GS up to 2.7.7. The affected element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2026A security flaw has been discovered in Open5GS up to 2.7.7.CVE-2026-8226 · Other software · Open5gs · reported by VulDBMedium 5.5
A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2026A vulnerability was identified in Open5GS up to 2.7.7.CVE-2026-8225 · Other software · Open5gs · reported by VulDBMedium 5.5
A vulnerability was identified in Open5GS up to 2.7.7. This affects the function pcf_npcf_smpolicycontrol_handle_delete of the file src/pcf/sm-sm.c of the component delete Endpoint. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 9, 2026A vulnerability was determined in Open5GS up to 2.7.7.CVE-2026-8224 · Other software · Open5gs · reported by VulDBMedium 5.5
A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function pcf_sess_set_ipv6prefix of the file /src/pcf/context.c of the component PCF. Executing a manipulation of the argument SmPolicyContextData.ipv6AddressPrefix can lead to denial of service. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 9, 2026A vulnerability was found in Open5GS up to 2.7.7.CVE-2026-8223 · Other software · Open5gs · reported by VulDBMedium 5.5
A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is the function pcf_sess_sbi_discover_and_send of the component sm-policies Endpoint. Performing a manipulation results in denial of service. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 9, 2026A vulnerability has been found in Open5GS up to 2.7.7.CVE-2026-8222 · Other software · Open5gs · reported by VulDBMedium 5.5
A vulnerability has been found in Open5GS up to 2.7.7. Affected is the function pcf_nbsf_management_handle_register of the file src/pcf/nbsf-handler.c of the component sm-policies Endpoint. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 9, 2026A vulnerability was detected in Open5GS up to 2.7.7.CVE-2026-8186 · Other software · Open5gs · reported by VulDBMedium 6.9
A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c of the component NF. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. The patch is named d5bc487fcf9ea87d2b03f2ef95123af344773bfb. It is suggested to install a patch to address this issue.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 9, 2026A flaw has been found in Open5GS up to 2.7.7.CVE-2026-8187 · Other software · Open5gs · reported by VulDBMedium 6.9
A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to resource consumption. The attack may be performed from remote. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2026A vulnerability was determined in Open5GS up to 2.7.7.CVE-2026-8123 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was determined in Open5GS up to 2.7.7. This impacts the function ogs_sbi_discovery_option_add_snssais in the library /lib/sbi/message.c of the component NSSF. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2026A vulnerability was found in Open5GS up to 2.7.7.CVE-2026-8122 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was found in Open5GS up to 2.7.7. This affects the function ogs_sbi_discovery_option_add_service_names in the library /lib/sbi/message.c of the component NSSF. The manipulation results in denial of service. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2026A vulnerability has been found in Open5GS up to 2.7.7.CVE-2026-8121 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability has been found in Open5GS up to 2.7.7. The impacted element is the function ogs_sbi_parse_plmn_list in the library /lib/sbi/conv.c of the component NSSF. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2026A flaw has been found in Open5GS up to 2.7.7.CVE-2026-8120 · Other software · Open5gs · reported by VulDBLow 2.1
A flaw has been found in Open5GS up to 2.7.7. The affected element is the function nssf_nnrf_nsselection_handle_get_from_amf_or_vnssf of the file /src/nssf/nnssf-handler.c of the component NSSF. Executing a manipulation can lead to denial of service. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2026A vulnerability was detected in Open5GS up to 2.7.7.CVE-2026-8119 · Other software · Open5gs · reported by VulDBLow 1.9
A vulnerability was detected in Open5GS up to 2.7.7. Impacted is the function ogs_sbi_stream_find_by_id in the library /lib/sbi/nghttp2-server.c of the component NSSF. Performing a manipulation results in denial of service. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 4, 2026A security vulnerability has been detected in Open5GS up to 2.7.7.CVE-2026-7781 · Other software · reported by VulDBLow 2.1
A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the function udm_nudm_uecm_handle_amf_registration_update of the file /src/udm/nudm-handler.c of the component amf-3gpp-access Endpoint. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 4, 2026A weakness has been identified in Open5GS up to 2.7.7.CVE-2026-7780 · Other software · reported by VulDBLow 2.1
A weakness has been identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function udm_state_operational of the file /src/udm/udm-sm.c of the component smf-registrations Endpoint. Executing a manipulation can lead to denial of service. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 4, 2026A security flaw has been discovered in Open5GS up to 2.7.7.CVE-2026-7779 · Other software · reported by VulDBLow 2.1
A security flaw has been discovered in Open5GS up to 2.7.7. Affected is the function udm_nudr_dr_handle_subscription_authentication of the file /src/udm/nudr-handler.c of the component authentication-subscription Endpoint. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 3, 2026A vulnerability was determined in Open5GS up to 2.7.7.CVE-2026-7708 · Other software · reported by VulDBLow 2.1
A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_dbi_subscription_data in the library /lib/dbi/subscription.c of the component UDR. This manipulation of the argument supi_id causes denial of service. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 3, 2026A vulnerability was found in Open5GS up to 2.7.7.CVE-2026-7707 · Other software · reported by VulDBLow 2.1
A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the argument pei results in denial of service. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 3, 2026A vulnerability has been found in Open5GS up to 2.7.7.CVE-2026-7706 · Other software · reported by VulDBLow 2.1
A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function gmm_handle_service_request of the file /src/amf/gmm-handler.c of the component AMF. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 1, 2026A vulnerability has been found in Open5GS up to 2.7.6.CVE-2026-7601 · Other software · reported by VulDBMedium 5.3
A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_type leads to denial of service. The attack is possible to be carried out remotely. Upgrading to version 2.7.7 is able to address this issue. The identifier of the patch is ebc66942b6f8f1fab2d640e71cf4e9f1a423b426. It is advisable to upgrade the affected component.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 1, 2026A vulnerability has been found in Open5GS up to 2.7.7.CVE-2026-7587 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handle_update_sm_context of the file /src/amf/nsmf-handler.c of the component AMF. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 1, 2026A weakness has been identified in Open5GS up to 2.7.7.CVE-2026-7586 · Other software · Open5gs · reported by VulDBLow 2.1
A weakness has been identified in Open5GS up to 2.7.7. Affected is the function ogs_id_get_value of the file /src/amf/nudm-handler.c of the component AMF. This manipulation causes denial of service. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 1, 2026A vulnerability was determined in Open5GS up to 2.7.7.CVE-2026-7585 · Other software · Open5gs · reported by VulDBLow 2.1
A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 1, 2026A flaw has been found in Open5GS up to 2.7.7.CVE-2026-7583 · Other software · reported by VulDBLow 2.1
A flaw has been found in Open5GS up to 2.7.7. This issue affects the function bsf_sess_find_by_ipv6prefix of the file /src/bsf/context.c of the component BSF. This manipulation of the argument ipv6Prefix causes denial of service. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2026A vulnerability was determined in Open5GS up to 2.7.7.CVE-2026-7536 · Other software · reported by VulDBMedium 5.5
A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function bsf_sess_add_by_ip_address of the file /nbsf-management/v1/pcfBindings of the component BSF. Executing a manipulation of the argument ipv4Addr can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2026A vulnerability was found in Open5GS up to 2.7.7.CVE-2026-7535 · Other software · reported by VulDBLow 2.1
A vulnerability was found in Open5GS up to 2.7.7. This affects the function amf_namf_comm_handle_registration_status_update_request in the library /lib/app/ogs-init.c of the file /namf-comm/v1/ue-contexts/{ueContextId}/transfer-update. Performing a manipulation of the argument ueContextId results in denial of service. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2026A flaw has been found in Open5GS up to 2.7.7.CVE-2026-7518 · Other software · reported by VulDBLow 2.1
A flaw has been found in Open5GS up to 2.7.7. This issue affects the function amf_namf_callback_handle_sdm_data_change_notify of the file /namf-callback/v1/{id}/sdmsubscription-notify of the component AMF SBI Endpoint. This manipulation of the argument changeItem.newValue causes denial of service. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2026Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 aCVE-2025-56568 · Other software · reported by MITREHigh 7.5
Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows remote attackers to cause denial of service via specially crafted NGAP messages containing malformed length fields in protocol configuration data.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2026An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification RequestCVE-2025-46115 · Other software · reported by MITREHigh 7.5
An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification Request
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026A security flaw has been discovered in Open5GS 2.7.6.CVE-2026-4988 · Other software · Open5gs · reported by VulDBLow 2.9
A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 16, 2026A vulnerability was determined in Open5GS up to 2.7.6.CVE-2026-4240 · Other software · Open5gs · reported by VulDBMedium 5.5
A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b_aaa_cb/smf_s6b_sta_cb of the component CCA Handler. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.7.7 is sufficient to fix this issue. Patch name: 80eb484a6ab32968e755e628b70d1a9c64f012ec. Upgrading the affected component is recommended.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2026A flaw has been found in Open5GS 2.7.6.CVE-2026-2524 · Other software · Open5gs · reported by VulDBMedium 5.5
A flaw has been found in Open5GS 2.7.6. The impacted element is the function mme_s11_handle_create_session_response of the component MME. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2026A vulnerability was detected in Open5GS up to 2.7.6.CVE-2026-2523 · Other software · Open5gs · reported by VulDBMedium 5.5
A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smf_gn_handle_create_pdp_context_request of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2026A security vulnerability has been detected in Open5GS up to 2.7.6.CVE-2026-2522 · Other software · Open5gs · reported by VulDBMedium 5.5
A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the component MME. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- Open5gs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.