{"id":"CVE-2026-86212","title":"A vulnerability has been found in Open5GS 2.7.7/2.8.0","summary":"A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-266","CWE-285"],"product":"Open5GS","affected":["Open5GS 2.7.7","Open5GS 2.8.0"],"published":"2026-09-06","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:37.160","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86212","references":[{"url":"https://github.com/open5gs/open5gs/","label":"cna@vuldb.com"},{"url":"https://github.com/open5gs/open5gs/commit/9468de94caed2fc940f4a23cbf734651896d0fde","label":"cna@vuldb.com"},{"url":"https://github.com/open5gs/open5gs/issues/4680","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86212","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/896623","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399348","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399348/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-11T20:04:57.823872Z"},"epss":0.00278,"epssPercentile":0.20473,"ingestedAt":"2026-09-07T03:04:07.487Z","slug":"CVE-2026-86212","body":"## Overview\n\nA vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9468de94caed2fc940f4a23cbf734651896d0fde. To fix this issue, it is recommended to deploy a patch.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":36,"depthScoreParts":{"impact":23.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202089,"id":"CVE-2026-86212","ts":1789400062381,"field":"exploit_available","old":"false","new":"true"},{"seq":200816,"id":"CVE-2026-86212","ts":1789397616384,"field":"exploit_available","old":"true","new":"false"},{"seq":199509,"id":"CVE-2026-86212","ts":1789395528919,"field":"exploit_available","old":"false","new":"true"},{"seq":198754,"id":"CVE-2026-86212","ts":1789392244088,"field":"exploit_available","old":"true","new":"false"},{"seq":197087,"id":"CVE-2026-86212","ts":1789384292415,"field":"exploit_available","old":"false","new":"true"},{"seq":196388,"id":"CVE-2026-86212","ts":1789383756654,"field":"exploit_available","old":"true","new":"false"},{"seq":195834,"id":"CVE-2026-86212","ts":1789380634576,"field":"exploit_available","old":"false","new":"true"},{"seq":194216,"id":"CVE-2026-86212","ts":1789378783050,"field":"exploit_available","old":"true","new":"false"},{"seq":193003,"id":"CVE-2026-86212","ts":1789376515096,"field":"exploit_available","old":"false","new":"true"},{"seq":191790,"id":"CVE-2026-86212","ts":1789373631080,"field":"exploit_available","old":"true","new":"false"},{"seq":190575,"id":"CVE-2026-86212","ts":1789369475615,"field":"exploit_available","old":"false","new":"true"},{"seq":189362,"id":"CVE-2026-86212","ts":1789368413716,"field":"exploit_available","old":"true","new":"false"},{"seq":188145,"id":"CVE-2026-86212","ts":1789365230783,"field":"exploit_available","old":"false","new":"true"},{"seq":186932,"id":"CVE-2026-86212","ts":1789363471246,"field":"exploit_available","old":"true","new":"false"},{"seq":185718,"id":"CVE-2026-86212","ts":1789361229145,"field":"exploit_available","old":"false","new":"true"},{"seq":184505,"id":"CVE-2026-86212","ts":1789358363710,"field":"exploit_available","old":"true","new":"false"},{"seq":182756,"id":"CVE-2026-86212","ts":1789354317165,"field":"exploit_available","old":"false","new":"true"},{"seq":181549,"id":"CVE-2026-86212","ts":1789353317664,"field":"exploit_available","old":"true","new":"false"},{"seq":180342,"id":"CVE-2026-86212","ts":1789350284724,"field":"exploit_available","old":"false","new":"true"},{"seq":179135,"id":"CVE-2026-86212","ts":1789348292844,"field":"exploit_available","old":"true","new":"false"},{"seq":177928,"id":"CVE-2026-86212","ts":1789346370031,"field":"exploit_available","old":"false","new":"true"},{"seq":176721,"id":"CVE-2026-86212","ts":1789343184492,"field":"exploit_available","old":"true","new":"false"},{"seq":174838,"id":"CVE-2026-86212","ts":1789334875708,"field":"exploit_available","old":"false","new":"true"},{"seq":173633,"id":"CVE-2026-86212","ts":1789333687452,"field":"exploit_available","old":"true","new":"false"},{"seq":172447,"id":"CVE-2026-86212","ts":1789331093030,"field":"exploit_available","old":"false","new":"true"},{"seq":171261,"id":"CVE-2026-86212","ts":1789328780858,"field":"exploit_available","old":"true","new":"false"},{"seq":170056,"id":"CVE-2026-86212","ts":1789327197172,"field":"exploit_available","old":"false","new":"true"},{"seq":168851,"id":"CVE-2026-86212","ts":1789323840052,"field":"exploit_available","old":"true","new":"false"},{"seq":167646,"id":"CVE-2026-86212","ts":1789319702582,"field":"exploit_available","old":"false","new":"true"},{"seq":166441,"id":"CVE-2026-86212","ts":1789318776105,"field":"exploit_available","old":"true","new":"false"},{"seq":165236,"id":"CVE-2026-86212","ts":1789315790301,"field":"exploit_available","old":"false","new":"true"},{"seq":164031,"id":"CVE-2026-86212","ts":1789313634247,"field":"exploit_available","old":"true","new":"false"},{"seq":162826,"id":"CVE-2026-86212","ts":1789311903455,"field":"exploit_available","old":"false","new":"true"},{"seq":161621,"id":"CVE-2026-86212","ts":1789308733178,"field":"exploit_available","old":"true","new":"false"},{"seq":159734,"id":"CVE-2026-86212","ts":1789300470576,"field":"exploit_available","old":"false","new":"true"},{"seq":158838,"id":"CVE-2026-86212","ts":1789299572041,"field":"exploit_available","old":"true","new":"false"},{"seq":158293,"id":"CVE-2026-86212","ts":1789296693062,"field":"exploit_available","old":"false","new":"true"},{"seq":156723,"id":"CVE-2026-86212","ts":1789294755634,"field":"exploit_available","old":"true","new":"false"},{"seq":155518,"id":"CVE-2026-86212","ts":1789292967951,"field":"exploit_available","old":"false","new":"true"},{"seq":154313,"id":"CVE-2026-86212","ts":1789289797566,"field":"exploit_available","old":"true","new":"false"},{"seq":151564,"id":"CVE-2026-86212","ts":1789277629876,"field":"exploit_available","old":"false","new":"true"},{"seq":150525,"id":"CVE-2026-86212","ts":1789276245608,"field":"exploit_available","old":"true","new":"false"},{"seq":149492,"id":"CVE-2026-86212","ts":1789273824722,"field":"exploit_available","old":"false","new":"true"},{"seq":148459,"id":"CVE-2026-86212","ts":1789271348721,"field":"exploit_available","old":"true","new":"false"},{"seq":146490,"id":"CVE-2026-86212","ts":1789269398045,"field":"exploit_available","old":"false","new":"true"},{"seq":145295,"id":"CVE-2026-86212","ts":1789266339597,"field":"exploit_available","old":"true","new":"false"},{"seq":144199,"id":"CVE-2026-86212","ts":1789262616759,"field":"exploit_available","old":"false","new":"true"},{"seq":143103,"id":"CVE-2026-86212","ts":1789261533409,"field":"exploit_available","old":"true","new":"false"},{"seq":141934,"id":"CVE-2026-86212","ts":1789258831789,"field":"exploit_available","old":"false","new":"true"},{"seq":140775,"id":"CVE-2026-86212","ts":1789256727124,"field":"exploit_available","old":"true","new":"false"}]}