Login Request a demo
OP
Product
open5gs
by open5gs · last CVE Oct 26, 2026
202
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Vulnerabilities202In the news0Timeline
Severity mix
Critical 5High 87Medium 103Low 7
Severity
All severities202Critical5High87Medium103Low7
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add open5gs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-8292
6.5
0%
May 11
Open5GS NRF conv.c yuarel_parse denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8291
6.5
0%
May 11
Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8290
6.5
0%
May 11
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8289
6.5
0%
May 11
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8288
6.5
0%
May 11
Open5GS SMF gsm-handler.c denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8270
6.5
0%
May 11
Open5GS SMF ogs_nas_parse_qos_rules denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8269
6.5
0%
May 11
Open5GS SMF smf_nsmf_handle_create_sm_context denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8268
6.5
0%
May 11
Open5GS SMF OpenAPI_list_create denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8267
6.5
0%
May 11
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8266
6.5
0%
May 11
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_accept denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8252
6.5
0%
May 10
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8251
6.5
0%
May 10
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8250
6.5
0%
May 10
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8249
6.5
0%
May 10
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8248
6.5
0%
May 10
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8123
6.5
0%
May 8
Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8122
6.5
0%
May 8
Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_names denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8121
6.5
0%
May 8
Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8120
6.5
0%
May 8
Open5GS NSSF nnssf-handler.c denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-0622
6.5
0%
Jan 20
Open 5GS WebUI uses a hard-coded JWT signing key
Affected: through 2.7.6
CVE-2025-25774
6.5
0%
Mar 12
An issue was discovered in Open5GS v2.7.2
Affected: 2.7.2
CVE-2022-3299
6.5
1%
Sep 26
A vulnerability was found in Open5GS up to 2.4.10
Affected: 2.4.0 through 2.4.10
CVE-2026-78158
6.3
0%
Aug 24
Open5GS AMF UEContextReleaseRequest Path improper authorization
Affected: 2.8.0
CVE-2025-15685
6.3
0%
Aug 12
Open5GS freeDiameter memory corruption
Affected: 2.7.0; 2.7.1
CVE-2024-14044
6.3
1%
Aug 12
Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow
Affected: 2.7.0; 2.7.1
CVE-2024-14043
6.3
1%
Aug 11
Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow
Affected: 2.7.0; 2.7.1
CVE-2024-14042
6.3
1%
Aug 11
Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow
Affected: 2.7.0; 2.7.1
CVE-2026-8743
6.3
0%
May 17
Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2023-37009
6.3
0%
Jan 22
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface
Affected: through 2.6.4
CVE-2023-37011
6.3
0%
Jan 22
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface
Affected: through 2.6.4
CVE-2023-37010
6.3
0%
Jan 22
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface
Affected: through 2.6.4
CVE-2026-108105
5.9
1%
Oct 9
Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request
Affected: through 2.8.0
CVE-2026-4988
5.9
1%
Mar 27
Open5GS CCA Message smf_s6b denial of service
Affected: 2.7.6
CVE-2025-14954
5.9
1%
Dec 19
Open5GS QER/FAR/URR/PDR context.c ogs_pfcp_qer_find_or_add assertion
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2023-50019
5.9
1%
Jan 2
An issue was discovered in open5gs v2.6.6
Affected: 2.6.6
CVE-2023-4885
5.9
0%
Oct 3
Multiple vulnerabilities in Open5GS
Affected: 2.4.10 and prior
CVE-2026-8119
5.5
0%
May 8
Open5GS NSSF nghttp2-server.c ogs_sbi_stream_find_by_id denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2025-15419
5.5
0%
Jan 2
Open5GS GTPv2-C Flow s5c-handler.c sgwc_s5c_handle_create_session_response denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2025-15418
5.5
0%
Jan 1
Open5GS Bearer QoS IE Length types.c ogs_gtp2_parse_bearer_qos denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2025-15417
5.5
0%
Jan 1
Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2026-108103
5.3
0%
Oct 9
Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE
Affected: through 2.8.0
CVE-2026-108102
5.3
0%
Oct 9
Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE
Affected: through 2.8.0
CVE-2026-107166
5.3
1%
Oct 7
Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-91855
5.3
1%
Sep 15
Open5GS PFCP Message handler.c denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2025-15684
5.3
1%
Aug 12
Open5GS CER init.c diam_log_func assertion
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2026-7536
5.3
0%
May 1
Open5GS BSF pcfBindings bsf_sess_add_by_ip_address denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-1738
5.3
1%
Feb 2
Open5GS SGWC context.c sgwc_tunnel_add assertion
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2026-1737
5.3
1%
Feb 2
Open5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertion
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2026-1736
5.3
1%
Feb 2
Open5GS SGWC s11-handler.c assertion
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2025-15531
5.3
1%
Jan 17
Open5GS context.c sgwc_bearer_add assertion
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5
Page 3 of 5 · 202 total
12345