CVE-2026-7601

Open5GS AMF gmm-handler.c denial of service

CVSS 5.3 MEDIUMEPSS 0.4%CWE-404

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

02 May 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_type leads to denial of service. The attack is possible to be carried out remotely. Upgrading to version 2.7.7 is able to address this issue. The identifier of the patch is ebc66942b6f8f1fab2d640e71cf4e9f1a423b426. It is advisable to upgrade the affected component.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X

Affected products

n/a · Open5GS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/open5gs/open5gs/https://github.com/open5gs/open5gs/commit/ebc66942b6f8f1fab2d640e71cf4e9f1a423b426 https://github.com/open5gs/open5gs/issues/4321 https://github.com/open5gs/open5gs/releases/tag/v2.7.7 https://vuldb.com/submit/805675 https://vuldb.com/vuln/360558 https://vuldb.com/vuln/360558/cti