CVE-2026-2521

Katalog CVE

CVSS 9.8 · Critical EPSS 0,76%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada open5gs. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can lead to memory corruption. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Rincian

Terbit di NVD

15 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,76% peluang dieksploitasi; lebih tinggi dari 54,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/issues/4282 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4282#issue-3807902188 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.346109 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.738334 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/ product
• https://vuldb.com/?ctiid.346109 permissions required · vdb entry