CVE-2026-10565Low· 3.1▾ TwilightPoC availableA security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function gmm_state_security_mode of the file src/amf/gmm-sm.c of the component NGAP Handover. Performing a manipulation results in race condition. Th…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 17.1 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function gmm_state_security_mode of the file src/amf/gmm-sm.c of the component NGAP Handover. Performing a manipulation results in race condition. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is regarded as difficult. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
Open5GS 2.7.0Open5GS 2.7.1Open5GS 2.7.2Open5GS 2.7.3Open5GS 2.7.4Open5GS 2.7.5Open5GS 2.7.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-10157High· 7.3Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication
CVE-2026-8743Medium· 6.3Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization
CVE-2026-107166Medium· 5.3A weakness has been identified in Open5GS up to 2.7.7
CVE-2026-92416Medium· 4.3A vulnerability has been found in Open5GS up to 2.8.0
CVE-2026-91855Medium· 5.3A security flaw has been discovered in Open5GS up to 2.7.7
CVE-2026-86212Medium· 4.3A vulnerability has been found in Open5GS 2.7.7/2.8.0