5.3
Medium
CVE-2026-78186 A flaw has been found in Open5GS up to 2.8.0
Description
A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: c9abe09421eb99bbf1cd7862a3d375e58a4eb9e4. It is recommended to apply a patch to fix this issue.
Affected products and versions
References
- VDB-394568 | Open5GS HSS hss-cx-path.c assertion vuldb.com
- VDB-394568 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-78186 | CVE Analysis and Report vuldb.com
- Submit #885203 | open5gs Open5GS 2.8.0 and earlier Reachable Assertion vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Open5GS
The 125 CVEs of Open5GS →
CVE-2026-107166
A weakness has been identified in Open5GS up to 2.7.7
6.9
Medium
CVE-2026-92417
A vulnerability was found in Open5GS up to 2.8.0
7.1
High
CVE-2026-92416
A vulnerability has been found in Open5GS up to 2.8.0
5.3
Medium
CVE-2026-91855
A security flaw has been discovered in Open5GS up to 2.7.7
6.9
Medium