CVE-2026-2062

MEDIUM EPSS 46.6%
Published Feb 6, 20264mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 4.0
Medium
Find Similar
Published Feb 6, 2026 4mo ago
Last Modified Jun 17, 2026 2w ago

Description

A vulnerability was identified in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_modify_bearer_response/sgwc_sxa_handle_session_modification_response of the component PGW S5U Address Handler. The manipulation leads to null pointer dereference. The attack can be initiated remotely. The exploit is publicly available and might be used. The identifier of the patch is f1bbd7b57f831e2a070780a7d8d5d4c73babdb59. Applying a patch is the recommended action to fix this issue.

CVSS Details

Base Score
5.5
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
46.6% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 2

CWE-404
CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 1

VendorProductVersionRange
open5gsopen5gs* ≤2.7.0

References 7

  • github.com https://github.com/open5gs/open5gs/
    Product
  • github.com https://github.com/open5gs/open5gs/commit/f1bbd7b57f831e2a070780a7d8d5d4c73babdb59
    Patch
  • github.com https://github.com/open5gs/open5gs/issues/4257
    ExploitIssue TrackingVendor Advisory
  • github.com https://github.com/open5gs/open5gs/issues/4257#issue-3787701521
    ExploitIssue TrackingVendor Advisory
  • vuldb.com https://vuldb.com/?ctiid.344622
    Permissions RequiredVDB Entry
  • vuldb.com https://vuldb.com/?id.344622
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/?submit.744719
    Third Party AdvisoryVDB Entry

Remediation

  • github.com https://github.com/open5gs/open5gs/commit/f1bbd7b57f831e2a070780a7d8d5d4c73babdb59
    Patch