CVE-2026-14618: fallo de gravedad media en Open5GS
Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 0.5%
A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_discover of the file src/amf/nnrf-handler.c of the component AMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as fb5f67703de0213fb9c6e6ef3b48b6c1707e9503. It is best practice to apply a patch to resolve this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
n/a · Open5GSPoCs públicas encontradas — 1
cve_referencegithub.com/open5gs/open5gs/issues/4517no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://github.com/ferrancanellas/open5gs/commit/fb5f67703de0213fb9c6e6ef3b48b6c1707e9503https://github.com/open5gs/open5gs/https://github.com/open5gs/open5gs/issues/4517https://github.com/open5gs/open5gs/issues/4517#issuecomment-4589606265https://vuldb.com/cve/CVE-2026-14618https://vuldb.com/submit/844824https://vuldb.com/vuln/376135https://vuldb.com/vuln/376135/cti