CVE-2026-7601

Open5GS AMF gmm-handler.c denial of service

CVSS 5.3 MEDIUMEPSS 0.4%CWE-404

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

02 may 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_type leads to denial of service. The attack is possible to be carried out remotely. Upgrading to version 2.7.7 is able to address this issue. The identifier of the patch is ebc66942b6f8f1fab2d640e71cf4e9f1a423b426. It is advisable to upgrade the affected component.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X

Productos afectados

n/a · Open5GS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/open5gs/open5gs/https://github.com/open5gs/open5gs/commit/ebc66942b6f8f1fab2d640e71cf4e9f1a423b426 https://github.com/open5gs/open5gs/issues/4321 https://github.com/open5gs/open5gs/releases/tag/v2.7.7 https://vuldb.com/submit/805675 https://vuldb.com/vuln/360558 https://vuldb.com/vuln/360558/cti