A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_discover of the file src/amf/nnrf-handler.c of the component AMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as fb5f67703de0213fb9c6e6ef3b48b6c1707e9503. It is best practice to apply a patch to resolve this issue.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://github.com/ferrancanellas/open5gs/commit/fb5f67703de0213fb9c6e6ef3b48b6c1707e9503 broken-link, patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.3NVD modified 2026-10-21 09:03
Affected (CPE criteria) 1
cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
References 8
- https://vuldb.com/vuln/376135 vdb-entry, technical-description
- https://vuldb.com/vuln/376135/cti signature, permissions-required
- https://vuldb.com/cve/CVE-2026-14618 third-party-advisory
- https://vuldb.com/submit/844824 third-party-advisory
- https://github.com/open5gs/open5gs/issues/4517 exploit, issue-tracking
- https://github.com/open5gs/open5gs/issues/4517#issuecomment-4589606265 issue-tracking
- https://github.com/ferrancanellas/open5gs/commit/fb5f67703de0213fb9c6e6ef3b48b6c1707e9503 broken-link, patch
- https://github.com/open5gs/open5gs/ product