CVE-2026-4240

MEDIUM EPSS 41.0%
Published Mar 16, 20263mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 4.0
Medium
Find Similar
Published Mar 16, 2026 3mo ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b_aaa_cb/smf_s6b_sta_cb of the component CCA Handler. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.7.7 is sufficient to fix this issue. Patch name: 80eb484a6ab32968e755e628b70d1a9c64f012ec. Upgrading the affected component is recommended.

CVSS Details

Base Score
5.5
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
41.0% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-404

Affected Products 1

VendorProductVersionRange
open5gsopen5gs* <2.7.7

References 8

  • github.com https://github.com/open5gs/open5gs/
    Product
  • github.com https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec
    Patch
  • github.com https://github.com/open5gs/open5gs/issues/4343
    Issue TrackingThird Party Advisory
  • github.com https://github.com/open5gs/open5gs/issues/4343#issue-4021871895
    ExploitIssue TrackingThird Party Advisory
  • github.com https://github.com/open5gs/open5gs/releases/tag/v2.7.7
    Release Notes
  • vuldb.com https://vuldb.com/?ctiid.351182
    Permissions RequiredVDB Entry
  • vuldb.com https://vuldb.com/?id.351182
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/?submit.771361
    ExploitThird Party AdvisoryVDB Entry

Remediation

  • github.com https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec
    Patch