CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product open5gs:open5gs. Show all products

96 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2026-108105Medium 5.9Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request
Assigned by VulnCheck
Oct 9, 2026
CVE-2026-108103Medium 5.3Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE
Assigned by VulnCheck
Oct 9, 2026
CVE-2026-108102Medium 5.3Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE
Assigned by VulnCheck
Oct 9, 2026
CVE-2026-107166Medium 5.3Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources
Assigned by VulDB
Oct 7, 2026
CVE-2026-92417Medium 6.5Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference
Assigned by VulDB
Sep 16, 2026
CVE-2026-92416Medium 4.3Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertion
Assigned by VulDB
Sep 16, 2026
CVE-2026-91855Medium 5.3Open5GS PFCP Message handler.c denial of service
Assigned by VulDB
Sep 15, 2026
CVE-2026-90707High 8.3Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free
Assigned by VulDB
Sep 14, 2026
CVE-2026-86212Medium 4.3Open5GS AMF/MME improper authorization
Assigned by VulDB
Sep 6, 2026
CVE-2026-82590Medium 4.3Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion
Assigned by VulDB
Aug 30, 2026
CVE-2026-82589Medium 4.3Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service
Assigned by VulDB
Aug 30, 2026
CVE-2026-82588Medium 4.3Open5GS Transfer Endpoint namf-handler.c null pointer dereference
Assigned by VulDB
Aug 30, 2026
CVE-2026-82587Medium 4.3Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption
Assigned by VulDB
Aug 30, 2026
CVE-2026-78186Medium 4.3Open5GS HSS hss-cx-path.c assertion
Assigned by VulDB
Aug 24, 2026
CVE-2026-78158Medium 6.3Open5GS AMF UEContextReleaseRequest Path improper authorization
Assigned by VulDB
Aug 24, 2026
CVE-2026-78157High 7.4Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds
Assigned by VulDB
Aug 24, 2026
CVE-2026-78156High 7.4Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow
Assigned by VulDB
Aug 23, 2026
CVE-2025-15687Medium 4.3Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service
Assigned by VulDB
Aug 12, 2026
CVE-2025-15686Medium 4.3Open5GS HSS Service fd_msg_sess_get denial of service
Assigned by VulDB
Aug 12, 2026
CVE-2025-15685Medium 6.3Open5GS freeDiameter memory corruption
Assigned by VulDB
Aug 12, 2026
CVE-2025-15684Medium 5.3Open5GS CER init.c diam_log_func assertion
Assigned by VulDB
Aug 12, 2026
CVE-2024-14044Medium 6.3Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow
Assigned by VulDB
Aug 12, 2026
CVE-2024-14043Medium 6.3Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow
Assigned by VulDB
Aug 11, 2026
CVE-2024-14042Medium 6.3Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow
Assigned by VulDB
Aug 11, 2026
CVE-2026-8746Medium 6.5A security flaw has been discovered in Open5GS up to 2.7.7.May 17, 2026
CVE-2026-8745Medium 6.5A vulnerability was identified in Open5GS up to 2.7.7.May 17, 2026
CVE-2026-8744Medium 6.5A vulnerability was determined in Open5GS up to 2.7.7.May 17, 2026
CVE-2026-8743Medium 6.3A vulnerability was found in Open5GS up to 2.7.6.May 17, 2026
CVE-2026-8731Medium 6.5A vulnerability has been found in Open5GS up to 2.7.7.May 17, 2026
CVE-2026-8730Medium 6.5A flaw has been found in Open5GS up to 2.7.6.May 17, 2026
CVE-2026-8729Medium 6.5A vulnerability was detected in Open5GS up to 2.7.7.May 17, 2026
CVE-2026-8728Medium 6.5A security vulnerability has been detected in Open5GS up to 2.7.7.May 17, 2026
CVE-2026-8292Medium 6.5A security vulnerability has been detected in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8291Medium 6.5A weakness has been identified in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8290Medium 6.5A security flaw has been discovered in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8289Medium 6.5A vulnerability was identified in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8288Medium 6.5A vulnerability was determined in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8270Medium 6.5A vulnerability was determined in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8269Medium 6.5A vulnerability was found in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8268Medium 6.5A vulnerability has been found in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8267Medium 6.5A flaw has been found in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8266Medium 6.5A vulnerability was detected in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8252Medium 6.5A vulnerability was determined in Open5GS up to 2.7.7.May 11, 2026
CVE-2026-8251Medium 6.5A vulnerability was found in Open5GS up to 2.7.7.May 10, 2026
CVE-2026-8250Medium 6.5A vulnerability has been found in Open5GS up to 2.7.7.May 10, 2026
CVE-2026-8249Medium 6.5A flaw has been found in Open5GS up to 2.7.7.May 10, 2026
CVE-2026-8248Medium 6.5A vulnerability was detected in Open5GS up to 2.7.7.May 10, 2026
CVE-2026-8226High 7.5A security flaw has been discovered in Open5GS up to 2.7.7.May 10, 2026
CVE-2026-8225High 7.5A vulnerability was identified in Open5GS up to 2.7.7.May 10, 2026
CVE-2026-8224High 7.5A vulnerability was determined in Open5GS up to 2.7.7.May 10, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.