CVE-2026-82550: medium-severity vulnerability in Linux Foundation Magma
Linux Foundation Magma NGSetupRequest input validation
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.7%
A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
Linux Foundation · Magmapublic PoCs found — 1
cve_referencegithub.com/magma/magma/issues/16023unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Linux Foundation Magma
In the same product, most dangerous first.
CVE-2026-82547MEDIUMLinux Foundation Magma Registration Complete Message amf_fsm.cpp improper authenticationEPSS 0.8%CVE-2026-82548MEDIUMLinux Foundation Magma InitialUEMessage information disclosureEPSS 0.5%CVE-2026-82552MEDIUMLinux Foundation Magma gNB Termination ngap_amf.c denial of serviceEPSS 0.5%CVE-2026-82551MEDIUMLinux Foundation Magma NGSetup ngap_amf_handlers.c state issueEPSS 0.5%CVE-2026-82549MEDIUMLinux Foundation Magma SecurityModeComplete integrity checkEPSS 0.3%