CVE-2025-15685 Open5GS freeDiameter memory corruption

A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely...

CVE-2025-15684 Open5GS CER init.c diam_log_func assertion

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...

CVE-2024-14044

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-14044

Open5GS

CVE-2024-14044 Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

EUVD-2024-55716

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

EUVD-2024-55715

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

PT-2026-71165

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

PT-2026-71035

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...

PT-2026-71166

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Insufficient input validation allows a remote authenticated attacker to execute arbitrary Control Language commands. Recommendations At the moment, there is no information about a newer version that...

PT-2026-70972

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.7 Description A remote attack can trigger a reachable assertion within the CER Handler component. The issue resides in the diam log func function located in the lib/diameter/common/init.c file. Recommendations...

PT-2026-71191

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper validation of input size may allow a remote attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-71187

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper privilege management may allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information. Recommendations At the moment, there is no information about a...

GitLab 18.5 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-7427)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19... CVE-2026-7427 Note that Nessus has not tested for this issue but has instead relied only on the...

PT-2026-71190

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote authenticated attacker can cause a denial of service due to improper neutralization of special elements in an OS command. This issue occurs when the system fails to properly sanitize input us...

PT-2026-71271

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of shell metacharacters. This occurs when the system fails to properly filter or escape special characters...

PT-2026-71188

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An out-of-bounds write allows a remote attacker to execute arbitrary code. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, potentially overwriting adjacen...

PT-2026-71171

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i...

PT-2026-71160

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authorization in the handling of high-authority threads allows a remote authenticated attacker to escalate privileges. Recommendations At the moment, there is no information about a newer...

PT-2026-71273

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to properly sanitize inp...