CVE-2026-1586: falha de média gravidade em Open5GS
Open5GS SGWC s11-handler.c ogs_gtp2_f_teid_to_ip denial of service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.6%
A flaw has been found in Open5GS up to 2.7.5. Impacted is the function ogs_gtp2_f_teid_to_ip of the file /sgwc/s11-handler.c of the component SGWC. Executing a manipulation can lead to denial of service. The attack may be performed from remote. The exploit has been published and may be used. It is advisable to implement a patch to correct this issue. The issue report is flagged as already-fixed.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
n/a · Open5GSReferências
https://github.com/open5gs/open5gs/https://github.com/open5gs/open5gs/issues/4273https://github.com/open5gs/open5gs/issues/4273#event-21968643659https://github.com/open5gs/open5gs/issues/4273#issue-3796030721https://vuldb.com/?ctiid.343349https://vuldb.com/?id.343349https://vuldb.com/?submit.738375