CVE-2026-117067

An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bound...

CVE-2026-117067

The OpenAirInterface (OAI) CN5G AMF v2.2.1 software is susceptible to an out-of-bounds memory access vulnerability within the N2 SCTP interface . The root cause is improper file descriptor bounds checking during the FD_SET() operation. An unauthenticated remote attacker can exploit this by repeat...

EUVD-2026-115355

An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bound...

CVE-2026-117067

An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bound...

PT-2026-135546

Name of the Vulnerable Software and Affected Versions OpenAirInterface OAI CN5G AMF version 2.2.1 Description An out-of-bounds memory access issue exists in the N2 SCTP interface. An unauthenticated remote attacker can trigger a denial of service DoS by repeatedly establishing SCTP associations...

CVE-2026-117067: n/a: An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows…

An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bound...

oppo-ghostlock

English | 简体中文 findn2-ksu-chain KernelSU late-load on a locked OPPO Find N2 — full chain, self-built LKM, no unlocked bootloader. futex-PI write primitive → cred overwrite → ADRP overflow fixed → kernelsu.ko live ✨ What is this A complete, working research chain that loads a self-compiled KernelS...

K000163625: Arm CPU vulnerability CVE-2025-10263

Security Advisory Description Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned b...

SUSE CVE-2026-42082

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 6.9.5.1. The AMF does not check for ongoing N2 handover procedures before initiating a NAS Security Mode Command,...

SUSE CVE-2026-44474

Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of security procedures defined in TS 33.501 6.9.5.1 - it could send a NAS Security Mode Command while an N2 handover was still pending and vice versa. Concurrent...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

PT-2026-95088

Name of the Vulnerable Software and Affected Versions MitraStar GPT-2741GNAC-N2-SV version BR g8.10 1.11WVK.0b46 Description Authenticated users can execute arbitrary operating system commands through the ping diagnostics and similar functions. This occurs via concatenated parameters sent in a...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483: Improper Neutralization of Special Elements used in an OS Command

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483

The MitraStar GPT-2741GNAC-N2-SV router, running firmware BR_g8.10_1.11(WVK.0)b46 , is vulnerable to arbitrary OS command execution . The flaw exists in the ping diagnostics and similar functions due to the improper neutralization of special elements used in an OS command. Specifically, an authen...

EUVD-2026-82467

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

EUVD-2026-68292

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...

CVE-2026-82589

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...

CVE-2026-82589 Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...