PT-2026-83632

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A remote memory corruption issue exists in the AMF component within the amf namf comm decode ue mm context list function located in the src/amf/namf-handler.c file. The flaw is triggered by the...

CVE-2026-82588: NULL Pointer Dereference

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CVE-2026-37198

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted GTP packet...

CVE-2026-30045

An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...

CVE-2026-30046

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

EUVD-2026-67103

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

EUVD-2026-67104

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30045: Integer Overflow or Wraparound

An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...

PT-2026-82677

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted GTP packet...

CVE-2026-30047: Reachable Assertion

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30045

An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...

EUVD-2026-67243

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted GTP packet...

EUVD-2026-67102

An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...

PT-2026-82519

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

PT-2026-82520

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-37198

The Open5GS software, specifically version v2.7.6 , is vulnerable to an integer overflow within the SMF component . An attacker can exploit this flaw by supplying a crafted GTP packet to trigger a Denial of Service (DoS) . No specific remediation or exploit details are provided in the documents.

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30046

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-37198: Integer Overflow or Wraparound

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted GTP packet...