CVE-2026-4240

Katalog CVE

CVSS 7.5 · High EPSS 0,92%

Kerentanan Improper Resource Shutdown or Release pada open5gs. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b_aaa_cb/smf_s6b_sta_cb of the component CCA Handler. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.7.7 is sufficient to fix this issue. Patch name: 80eb484a6ab32968e755e628b70d1a9c64f012ec. Upgrading the affected component is recommended.

Rincian

Terbit di NVD

16 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,92% peluang dieksploitasi; lebih tinggi dari 59,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec patch
• https://github.com/open5gs/open5gs/issues/4343 issue tracking · advisory pihak ketiga
• https://github.com/open5gs/open5gs/issues/4343#issue-4021871895 exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/?id.351182 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.771361 exploit · advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/ product
• https://github.com/open5gs/open5gs/releases/tag/v2.7.7 release notes
• https://vuldb.com/?ctiid.351182 permissions required · vdb entry