Skip to content
5.3 Medium

CVE-2026-10156 A vulnerability was determined in Open5GS up to 2.7.7

Description

A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. Executing a manipulation of the argument nf_info_pool can lead to resource consumption. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The issue report is flagged as already-fixed.

Affected products and versions

Product Affected versions Fixed in
Open5GS 2.7 2.7.0 → 2.7.7 No fix stated
The 125 CVEs of Open5GS →
Track this CVE