CVE-2026-2523

Katalog CVE

CVSS 7.5 · High EPSS 0,55%

Kerentanan Reachable Assertion pada open5gs. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smf_gn_handle_create_pdp_context_request of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Rincian

Terbit di NVD

16 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/issues/4285 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4285#issue-3809055236 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.346111 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.738342 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/ product
• https://vuldb.com/?ctiid.346111 permissions required · vdb entry