CVE-2026-1521
MEDIUM EPSS 39.7%
Published Jan 28, 20265mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 4.0
Published Jan 28, 2026 5mo ago
Last Modified Jun 17, 2026 2w ago
Description
A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_bearer_resource_failure_indication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The patch is named 69b53add90a9479d7960b822fc60601d659c328b. It is recommended to apply a patch to fix this issue.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
39.7% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available
Weaknesses 1
CWE-404
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| open5gs | open5gs | * | ≤2.7.6 |
References 8
- github.com https://github.com/open5gs/open5gs/
- github.com https://github.com/open5gs/open5gs/commit/69b53add90a9479d7960b822fc60601d659c328b
- github.com https://github.com/open5gs/open5gs/issues/4268
- github.com https://github.com/open5gs/open5gs/issues/4268#event-21989483261
- github.com https://github.com/open5gs/open5gs/issues/4268#issue-3795012861
- vuldb.com https://vuldb.com/?ctiid.343192
- vuldb.com https://vuldb.com/?id.343192
- vuldb.com https://vuldb.com/?submit.738370
Remediation
- github.com https://github.com/open5gs/open5gs/commit/69b53add90a9479d7960b822fc60601d659c328b