Approved changes feed: RSS · Atom

cpe:2.3:a:open5gs:open5gs:2.7.6:*:*:*:*:*:*:*

part: a version: 2.7.6 update: *

VendorOpen5Gs (46057549-a067-5205-be70-0777ed412b1e)
ProductOpen5Gs (5cd42453-8f6c-5ee3-9353-93a20c7017ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openverso/open5gs purl2cpe 2026-06-01 10:13:03.874851
pkg:github/open5gs/open5gs purl2cpe 2026-06-01 10:13:03.874852

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4988 vulnerable 2026-06-08 08:07:02.758924 Open5GS CCA Message smf_s6b denial of service
LOW (3.7)
A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-27T21:27:16.379Z
Updated: 2026-03-30T17:42:11.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2524 vulnerable 2026-06-08 07:55:17.171130 Open5GS MME mme_s11_handle_create_session_response denial of service
MEDIUM (5.3)
A flaw has been found in Open5GS 2.7.6. The impacted element is the function mme_s11_handle_create_session_response of the component MME. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-02-16T00:32:07.343Z
Updated: 2026-02-23T10:03:11.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63288 vulnerable 2026-06-08 07:39:17.493680 Details available
In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service.
Published: 2025-11-10T00:00:00.000Z
Updated: 2025-11-12T20:18:35.968Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.