CVE-2026-82547: medium-severity vulnerability in Linux Foundation Magma
Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.8%
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
Linux Foundation · Magmapublic PoCs found — 1
cve_referencegithub.com/magma/magma/issues/16020unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Linux Foundation Magma
In the same product, most dangerous first.
CVE-2026-82550MEDIUMLinux Foundation Magma NGSetupRequest input validationEPSS 0.7%CVE-2026-82548MEDIUMLinux Foundation Magma InitialUEMessage information disclosureEPSS 0.5%CVE-2026-82552MEDIUMLinux Foundation Magma gNB Termination ngap_amf.c denial of serviceEPSS 0.5%CVE-2026-82551MEDIUMLinux Foundation Magma NGSetup ngap_amf_handlers.c state issueEPSS 0.5%CVE-2026-82549MEDIUMLinux Foundation Magma SecurityModeComplete integrity checkEPSS 0.3%