CVE-2026-78157

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

CVE-2026-78157 Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

CVE-2026-78157 Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

CVE-2026-78157

Open5GS 2.8.0 contains an out-of-bounds read vulnerability in the function pcrf_rx_aar_cb within src/pcrf/pcrf-rx-path.c , part of the Rx AA-Request Handler component. The flaw can be triggered remotely with low privileges and no user interaction. CVSS 3.1 scores it 7.4 (HIGH) with scope changed ...

CVE-2026-78157 Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

CVE-2026-78157

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

EUVD-2026-64675

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

PT-2026-79792

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf rx aar cb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

CVE-2026-78157: Out-of-bounds Read

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +928 more potentially affected by CVE-2026-62383 via nltk (>=3.0.0, <=3.10.1)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-62383 Source advisory: SNYK:PYTHON-NLTK-19233404...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +928 more potentially affected by CVE-2026-62384 via nltk (>=3.0.0, <=3.10.1)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-62384 Source advisory: SNYK:PYTHON-NLTK-19233402...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +924 more potentially affected by CVE-2026-63311 via nltk (>=3.0.0, <=3.9.4)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-63311 Source advisory: OSV:PYSEC-2026-3723...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +924 more potentially affected by CVE-2026-62388 via nltk (>=3.0.0, <=3.9.4)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-62388 Source advisory: OSV:PYSEC-2026-3722...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +804 more potentially affected by CVE-2026-66393 via nltk (>=2.0.4, <=3.9.3)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-66393 Source advisory: MEND:CVE-2026-66393...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +926 more potentially affected by CVE-2026-62385 via nltk (>=2.0.4, <=3.9.4)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-62385 Source advisory: MEND:CVE-2026-62385...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +930 more potentially affected by CVE-2026-72818 via nltk (>=2.0.4, <=3.10.0)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-72818 Source advisory: MEND:CVE-2026-72818...

PT-2026-72773

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where NMI and tracepoint BPF programs can re-enter a per-CPU or global LRU lock that is already held by bpf lru pop free or push free on the same CPU...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +924 more potentially affected by CVE-2026-12372 via nltk (>=3.0.0, <=3.9.4)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-12372 Source advisory: OSV:PYSEC-2026-3955...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +926 more potentially affected by CVE-2026-12372 via nltk (>=2.0.4, <=3.9.4)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-12372 Source advisory: MEND:CVE-2026-12372...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +924 more potentially affected by CVE-2026-12372 via nltk (>=3.0.0, <=3.9.4)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-12372 Source advisory: SNYK:PYTHON-NLTK-18601824...