Skip to content
Open5gs vulnerabilities
Newest
-
open5gs
Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output
CVE-2026-116544
6.3 Medium
-
open5gs
Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser
CVE-2026-116543
8.7 High
-
open5gs
Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request
CVE-2026-108105
8.2 High
-
open5gs
Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE
CVE-2026-108103
6.9 Medium
-
open5gs
Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE
CVE-2026-108102
6.9 Medium
-
open5gs
Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler
CVE-2026-15720
8.6 High
-
open5gs
Open5GS NRF nghttp2-server.c discover_handler use after free
CVE-2026-8746
5.3 Medium
-
open5gs
Open5GS AUSF nausf-handler.c ogs_timer_add denial of service
CVE-2026-8745
5.3 Medium
-
open5gs
Open5GS NRF context.c ogs_sbi_nf_service_add denial of service
CVE-2026-8744
5.3 Medium
-
open5gs
Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization
CVE-2026-8743
5.3 Medium
-
open5gs
Open5GS NRF client.c ogs_sbi_client_add denial of service
CVE-2026-8731
5.3 Medium
-
open5gs
Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service
CVE-2026-8730
5.3 Medium
-
open5gs
Open5GS NRF message.c denial of service
CVE-2026-8729
5.3 Medium
-
open5gs
Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of service
CVE-2026-8728
5.3 Medium
-
open5gs
Open5GS NRF conv.c yuarel_parse denial of service
CVE-2026-8292
5.3 Medium
-
open5gs
Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service
CVE-2026-8291
5.3 Medium
-
open5gs
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
CVE-2026-8290
5.3 Medium
-
open5gs
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
CVE-2026-8289
5.3 Medium
-
open5gs
Open5GS SMF gsm-handler.c denial of service
CVE-2026-8288
5.3 Medium
-
open5gs
Open5GS SMF ogs_nas_parse_qos_rules denial of service
CVE-2026-8270
5.3 Medium
-
open5gs
Open5GS SMF smf_nsmf_handle_create_sm_context denial of service
CVE-2026-8269
5.3 Medium
-
open5gs
Open5GS SMF OpenAPI_list_create denial of service
CVE-2026-8268
5.3 Medium
-
open5gs
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of service
CVE-2026-8267
5.3 Medium
-
open5gs
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_accept denial of service
CVE-2026-8266
5.3 Medium
-
open5gs
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
CVE-2026-8252
5.3 Medium
-
open5gs
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
CVE-2026-8251
5.3 Medium
-
open5gs
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list denial of service
CVE-2026-8250
5.3 Medium
-
open5gs
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
CVE-2026-8249
5.3 Medium
-
open5gs
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
CVE-2026-8248
5.3 Medium
-
open5gs
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service
CVE-2026-8226
6.9 Medium
-
open5gs
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of service
CVE-2026-8225
6.9 Medium
-
open5gs
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of service
CVE-2026-8224
6.9 Medium
-
open5gs
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of service
CVE-2026-8223
6.9 Medium
-
open5gs
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_management_handle_register denial of service
CVE-2026-8222
6.9 Medium
-
open5gs
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-of-bounds
CVE-2026-8186
6.9 Medium
-
open5gs
Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption
CVE-2026-8187
6.9 Medium
-
open5gs
Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service
CVE-2026-8123
5.3 Medium
-
open5gs
Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_names denial of service
CVE-2026-8122
5.3 Medium
-
open5gs
Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of service
CVE-2026-8121
5.3 Medium
-
open5gs
Open5GS NSSF nnssf-handler.c denial of service
CVE-2026-8120
5.3 Medium
-
open5gs
Open5GS NSSF nghttp2-server.c ogs_sbi_stream_find_by_id denial of service
CVE-2026-8119
4.8 Medium
-
open5gs
Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service
CVE-2026-7587
5.3 Medium
-
open5gs
Open5GS AMF nudm-handler.c ogs_id_get_value denial of service
CVE-2026-7586
5.3 Medium
-
open5gs
Open5GS AMF nudm-handler.c amf_nudm_sdm_handle_provisioned denial of service
CVE-2026-7585
5.3 Medium
-
open5gs
Open5GS CCA Message smf_s6b denial of service
CVE-2026-4988
6.3 Medium
-
open5gs
Open5GS CCA smf_s6b_sta_cb denial of service
CVE-2026-4240
6.9 Medium
-
open5gs
Open5GS MME mme_s11_handle_create_session_response denial of service
CVE-2026-2524
6.9 Medium
-
open5gs
Open5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion
CVE-2026-2523
6.9 Medium
-
open5gs
Open5GS MME esm-build.c memory corruption
CVE-2026-2522
6.9 Medium
-
open5gs
Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption
CVE-2026-2521
6.9 Medium
- Show olderLoading…