CVE-2026-82548: medium-severity vulnerability in Linux Foundation Magma
Linux Foundation Magma InitialUEMessage information disclosure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.5%
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
Linux Foundation · Magmapublic PoCs found — 1
cve_referencegithub.com/magma/magma/issues/16022unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Linux Foundation Magma
In the same product, most dangerous first.
CVE-2026-82547MEDIUMLinux Foundation Magma Registration Complete Message amf_fsm.cpp improper authenticationEPSS 0.8%CVE-2026-82550MEDIUMLinux Foundation Magma NGSetupRequest input validationEPSS 0.7%CVE-2026-82552MEDIUMLinux Foundation Magma gNB Termination ngap_amf.c denial of serviceEPSS 0.5%CVE-2026-82551MEDIUMLinux Foundation Magma NGSetup ngap_amf_handlers.c state issueEPSS 0.5%CVE-2026-82549MEDIUMLinux Foundation Magma SecurityModeComplete integrity checkEPSS 0.3%