CVE-2024-51179

CVE-2024-51179 : Flooding of Crafted packets from an Attacker can crash UPF/SMF in Open5gs Vulnerability Description Description: An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of servie via the Network Function Virtualizations NFVs such as the User Plane Function UPF and...

CVE-2026-86212

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

CVE-2026-86212 Open5GS AMF/MME improper authorization

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

CVE-2026-86212

Open5GS 2.7.7/2.8.0 is affected by an improper authorization vulnerability in the AMF/MME component. The flaw allows a remote attacker with low privileges to manipulate authorization checks, resulting in a low availability impact (no confidentiality or integrity impact). A proof-of-concept exploi...

EUVD-2026-72103

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

Open5GS-CVE-2025-41067-CVE-2025-41068-PoC

Open5GS NRF Denial of Service CVE-2025-41067 & CVE-2025-41068 This repository contains Proof-of-Concept PoC exploit scripts for two high-severity vulnerabilities discovered in NewPlane's Open5GS. These vulnerabilities can be triggered by an attacker to cause a Denial of Service DoS in the NRF...

CVE-2026-75438

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogssbitimeparse function...

CVE-2026-75438

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogssbitimeparse function...

CVE-2026-75438

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogssbitimeparse function...

EUVD-2026-71769

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogssbitimeparse function...

CVE-2026-75438

Open5GS v2.7.7 is affected by a buffer overflow in the ogs_sbi_time_parse() function, enabling a remote unauthenticated attacker to trigger a denial of service with no user interaction. The vulnerability is rated CVSS 3.1 7.5 (High) — network vector, low complexity, no privileges required, high a...

EUVD-2026-68291

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

EUVD-2026-68292

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...

EUVD-2026-68293

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smfnudmsdmhandleget of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely...

CVE-2026-82590

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smfnudmsdmhandleget of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely...

CVE-2026-82589

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...

CVE-2026-82590 Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smfnudmsdmhandleget of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely...

CVE-2026-82590

Open5GS versions up to 2.7.7 are affected by a vulnerability in the SMF (Session Management Function) component, specifically in the function smf_nudm_sdm_handle_get within src/smf/nudm-handler.c. A remote attacker can manipulate the preemptCap argument to trigger a reachable assertion , resultin...

CVE-2026-82590 Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smfnudmsdmhandleget of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely...

CVE-2026-82588

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...