CVE-2026-8743Medium· 6.3▾ TwilightPoC availableA vulnerability was found in Open5GS up to 2.7.6. This impacts the function ran_ue_find_by_amf_ue_ngap_id of the file src/amf/context.c of the component AMF/MME. Performing a manipulation results in improper authorization. It is possible…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 34.7 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
A vulnerability was found in Open5GS up to 2.7.6. This impacts the function ran_ue_find_by_amf_ue_ngap_id of the file src/amf/context.c of the component AMF/MME. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1. It is suggested to install a patch to address this issue.
Open5GS 2.7.0Open5GS 2.7.1Open5GS 2.7.2Open5GS 2.7.3Open5GS 2.7.4Open5GS 2.7.5Open5GS 2.7.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-86212Medium· 4.3A vulnerability has been found in Open5GS 2.7.7/2.8.0
CVE-2026-10157High· 7.3Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication
CVE-2026-10565Low· 3.1Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode race condition
CVE-2026-107166Medium· 5.3A weakness has been identified in Open5GS up to 2.7.7
CVE-2026-92416Medium· 4.3A vulnerability has been found in Open5GS up to 2.8.0
CVE-2026-91855Medium· 5.3A security flaw has been discovered in Open5GS up to 2.7.7