open5gs Vulnerability Advisory Catalog

Total 154 security vulnerabilities recorded for open5gs software and firmware.

← Back to All Vendors
CVE-2026-1737 MEDIUM
Component: open5gs

A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function sgwc_s5c_handle_create_bearer_request of the file /src/sgwc/...

📅 2026-02-02
CVSS 5.3 Dossier →
CVE-2026-1736 MEDIUM
Component: open5gs

A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_req...

📅 2026-02-02
CVSS 5.3 Dossier →
CVE-2026-1587 MEDIUM
Component: open5gs

A vulnerability has been found in Open5GS up to 2.7.6. The affected element is the function sgwc_s11_handle_modify_bearer_request of the file /sgwc/s1...

📅 2026-01-29
CVSS 5.3 Dossier →
CVE-2026-1586 MEDIUM
Component: open5gs

A flaw has been found in Open5GS up to 2.7.5. Impacted is the function ogs_gtp2_f_teid_to_ip of the file /sgwc/s11-handler.c of the component SGWC. Ex...

📅 2026-01-29
CVSS 5.3 Dossier →
CVE-2026-1522 MEDIUM
Component: open5gs

A weakness has been identified in Open5GS up to 2.7.6. This vulnerability affects the function sgwc_s5c_handle_modify_bearer_response of the file src/...

📅 2026-01-28
CVSS 5.3 Dossier →
CVE-2026-1521 MEDIUM
Component: open5gs

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_bearer_resource_failure_indication of the file s...

📅 2026-01-28
CVSS 5.3 Dossier →
CVE-2026-0622 MEDIUM
Component: open5gs

Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset...

📅 2026-01-20
CVSS 6.5 Dossier →
Component: open5gs

A vulnerability was determined in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_downlink_data_notification_ack of the file src/sgwc/s1...

📅 2026-01-19
CVSS 5.3 Dossier →
Component: open5gs

A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown processing of the component Timer Handler. The manipulatio...

📅 2026-01-17
CVSS 5.3 Dossier →
Component: open5gs

A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The man...

📅 2026-01-17
CVSS 5.3 Dossier →
Component: open5gs

A vulnerability was determined in Open5GS up to 2.7.6. This affects the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request of the...

📅 2026-01-17
CVSS 5.3 Dossier →
Component: open5gs

A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_session_response of the file src/sgwc/...

📅 2026-01-16
CVSS 5.3 Dossier →
Component: open5gs

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this vulnerability is an unknown functionality of the component GTPv2 Bearer Respon...

📅 2026-01-16
CVSS 5.3 Dossier →
Component: open5gs

A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_session_response of the file src/...

📅 2026-01-02
CVSS 3.3 Dossier →
Component: open5gs

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_parse_bearer_qos in the library li...

📅 2026-01-02
CVSS 3.3 Dossier →
Component: open5gs

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request of the file src/sgwc/s11-handle...

📅 2026-01-01
CVSS 3.3 Dossier →
Component: open5gs

A flaw has been found in Open5GS up to 2.7.5. This affects the function decode_ipv6_header/ogs_pfcp_pdr_rule_find_by_packet of the file lib/pfcp/rule-...

📅 2025-12-29
CVSS 5.3 Dossier →
Component: open5gs

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/ha...

📅 2025-12-19
CVSS 3.7 Dossier →
Component: open5gs

A vulnerability has been found in Open5GS up to 2.7.6. Affected is the function ogs_pfcp_pdr_find_or_add/ogs_pfcp_far_find_or_add/ogs_pfcp_urr_find_or...

📅 2025-12-19
CVSS 3.7 Dossier →
Component: open5gs

A flaw has been found in Open5GS up to 2.7.5. This impacts the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component ...

📅 2025-12-19
CVSS 3.1 Dossier →
Component: open5gs

An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), the UPF crashes with a reachable...

📅 2025-12-18
CVSS 7.5 Dossier →
Component: open5gs

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service....

📅 2025-11-10
CVSS 7.5 Dossier →
Component: open5gs

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. This is a...

📅 2025-10-27
CVSS 7.5 Dossier →
Component: open5gs

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI re...

📅 2025-10-27
CVSS 7.5 Dossier →
Page 3 of 7 (154 Total Records)