CVE-2026-1521

Katalog CVE

CVSS 7.5 · High EPSS 0,59%

Kerentanan Improper Resource Shutdown or Release pada open5gs. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_bearer_resource_failure_indication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The patch is named 69b53add90a9479d7960b822fc60601d659c328b. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

28 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,59% peluang dieksploitasi; lebih tinggi dari 46,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/issues/4268 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4268#event-21989483261 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4268#issue-3795012861 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/commit/69b53add90a9479d7960b822fc60601d659c328b patch
• https://vuldb.com/?id.343192 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.738370 exploit · advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/
• https://vuldb.com/?ctiid.343192 permissions required · vdb entry