CVE-2024-51179

CVE-2024-51179 : L'inondazione di pacchetti manipolati da un attaccante può far crashare UPF/SMF in Open5gs Descrizione della vulnerabilità Descrizione: Un problema in Open5GS v.2.7.1 consente a un attaccante remoto di causare un denial of service attraverso le Virtualizzazioni delle Funzioni di...

Open5GS-CVE-2025-41067-CVE-2025-41068-PoC

Open5GS NRF डिनायल ऑफ सर्विस CVE-2025-41067 & CVE-2025-41068 यह रिपॉज़िटरी NewPlane के Open5GS में खोजी गई दो उच्च-गंभीरता वाली कमजोरियों के लिए प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट स्क्रिप्ट्स रखता है। इन कमजोरियों को एक हमलावर द्वारा NRF नेटवर्क रिपॉज़िटरी फंक्शन घटक में डिनायल ऑफ सर्विस DoS उत्पन...

CVE-2026-30046

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30045

An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

EUVD-2026-67103

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

EUVD-2026-67104

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30045

An integer overflow vulnerability in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows a remote attacker to cause a Denial of Service (DoS) by supplying a crafted HTTP/2 GET request. The overflow occurs during processing of the NF instance discovery endpoint in the 5G core network...

CVE-2026-30046

Open5GS v2.7.6 is affected by a reachable assertion vulnerability in the NUDM-UECM interface . A remote, unauthenticated attacker can trigger a Denial of Service by supplying a crafted DELETE request , leading to a crash of the affected component. The CVSS v3.1 score is 7.5 (HIGH) , reflecting a ...

CVE-2026-37198

CVE-2026-37198 affects the SMF (Session Management Function) component of Open5GS v2.7.6 , an open-source 5G core network implementation. The root cause is an integer overflow that can be triggered by supplying a crafted GTP (GPRS Tunnelling Protocol) packet , resulting in a Denial of Service (Do...

EUVD-2026-67102

An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30046

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30047

Open5GS v2.7.6 contains a reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts REST endpoint. An unauthenticated, network-based attacker can trigger a Denial of Service by sending a crafted DELETE request to that component, resulting in a process crash due to the reachable ass...

CVE-2026-78186

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

CVE-2026-78186 Open5GS HSS hss-cx-path.c assertion

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

CVE-2026-78186 Open5GS HSS hss-cx-path.c assertion

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

EUVD-2026-64722

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

CVE-2026-78186

A remote reachable assertion vulnerability exists in the HSS component of Open5GS up to version 2.8.0, specifically in the file src/hss/hss-cx-path.c. The flaw is triggered by manipulation of the User-Name argument, leading to an assertion failure that impacts availability . The attack requires l...

CVE-2026-78157

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...