Login Request a demo
OP
Product
open5gs
by open5gs · last CVE Oct 26, 2026
202
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Vulnerabilities202In the news0Timeline
Severity mix
Critical 5High 87Medium 103Low 7
Severity
All severities202Critical5High87Medium103Low7
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add open5gs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92417
6.5
1%
Sep 16
Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +3 more
CVE-2026-8746
6.5
0%
May 17
Open5GS NRF nghttp2-server.c discover_handler use after free
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8745
6.5
0%
May 17
Open5GS AUSF nausf-handler.c ogs_timer_add denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8744
6.5
0%
May 17
Open5GS NRF context.c ogs_sbi_nf_service_add denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8731
6.5
0%
May 17
Open5GS NRF client.c ogs_sbi_client_add denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8730
6.5
0%
May 17
Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2026-8729
6.5
0%
May 17
Open5GS NRF message.c denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8728
6.5
0%
May 17
Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8292
6.5
0%
May 11
Open5GS NRF conv.c yuarel_parse denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8291
6.5
0%
May 11
Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8290
6.5
0%
May 11
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8289
6.5
0%
May 11
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8288
6.5
0%
May 11
Open5GS SMF gsm-handler.c denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8270
6.5
0%
May 11
Open5GS SMF ogs_nas_parse_qos_rules denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8269
6.5
0%
May 11
Open5GS SMF smf_nsmf_handle_create_sm_context denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8268
6.5
0%
May 11
Open5GS SMF OpenAPI_list_create denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8267
6.5
0%
May 11
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8266
6.5
0%
May 11
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_accept denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8252
6.5
0%
May 10
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8251
6.5
0%
May 10
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8250
6.5
0%
May 10
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8249
6.5
0%
May 10
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8248
6.5
0%
May 10
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8123
6.5
0%
May 8
Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8122
6.5
0%
May 8
Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_names denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8121
6.5
0%
May 8
Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-8120
6.5
0%
May 8
Open5GS NSSF nnssf-handler.c denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2026-0622
6.5
0%
Jan 20
Open 5GS WebUI uses a hard-coded JWT signing key
Affected: through 2.7.6
CVE-2025-25774
6.5
0%
Mar 12
An issue was discovered in Open5GS v2.7.2
Affected: 2.7.2
CVE-2022-3299
6.5
1%
Sep 26
A vulnerability was found in Open5GS up to 2.4.10
Affected: 2.4.0 through 2.4.10
CVE-2026-78158
6.3
0%
Aug 24
Open5GS AMF UEContextReleaseRequest Path improper authorization
Affected: 2.8.0
CVE-2025-15685
6.3
0%
Aug 12
Open5GS freeDiameter memory corruption
Affected: 2.7.0; 2.7.1
CVE-2024-14044
6.3
1%
Aug 12
Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow
Affected: 2.7.0; 2.7.1
CVE-2024-14043
6.3
1%
Aug 11
Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow
Affected: 2.7.0; 2.7.1
CVE-2024-14042
6.3
1%
Aug 11
Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow
Affected: 2.7.0; 2.7.1
CVE-2026-8743
6.3
0%
May 17
Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2023-37011
6.3
0%
Jan 22
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface
Affected: through 2.6.4
CVE-2023-37010
6.3
0%
Jan 22
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface
Affected: through 2.6.4
CVE-2023-37009
6.3
0%
Jan 22
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface
Affected: through 2.6.4
CVE-2026-108105
5.9
1%
Oct 9
Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request
Affected: through 2.8.0
CVE-2026-4988
5.9
1%
Mar 27
Open5GS CCA Message smf_s6b denial of service
Affected: 2.7.6
CVE-2025-14954
5.9
1%
Dec 19
Open5GS QER/FAR/URR/PDR context.c ogs_pfcp_qer_find_or_add assertion
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2023-50019
5.9
1%
Jan 2
An issue was discovered in open5gs v2.6.6
Affected: 2.6.6
CVE-2023-4885
5.9
0%
Oct 3
Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information
Affected: through 2.4.10
CVE-2026-8119
5.5
0%
May 8
Open5GS NSSF nghttp2-server.c ogs_sbi_stream_find_by_id denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +2 more
CVE-2025-15419
5.5
0%
Jan 2
Open5GS GTPv2-C Flow s5c-handler.c sgwc_s5c_handle_create_session_response denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2025-15418
5.5
0%
Jan 1
Open5GS Bearer QoS IE Length types.c ogs_gtp2_parse_bearer_qos denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2025-15417
5.5
0%
Jan 1
Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service
Affected: 2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; +1 more
CVE-2026-108103
5.3
0%
Oct 9
Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE
Affected: through 2.8.0
CVE-2026-108102
5.3
0%
Oct 9
Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE
Affected: through 2.8.0
Page 1 of 3 · 103 total
123