5.5
CVE-2026-1737
- EPSS 0.49%
- Veröffentlicht 02.02.2026 01:02:07
- Zuletzt bearbeitet 11.02.2026 19:34:45
- Quelle cna@vuldb.com
- CVE-Watchlists
- Unerledigt
LoginOpen5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertion
A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function sgwc_s5c_handle_create_bearer_request of the file /src/sgwc/s5c-handler.c of the component CreateBearerRequest Handler. Performing a manipulation results in reachable assertion. Remote exploitation of the attack is possible. The exploit is now public and may be used. To fix this issue, it is recommended to deploy a patch. The issue report is flagged as already-fixed.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.383 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
|
| cna@vuldb.com | 5.5 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-617 Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
https://github.com/open5gs/open5gs/
https://vuldb.com/?id.343636
https://vuldb.com/?ctiid.343636
https://vuldb.com/?submit.741192
https://github.com/open5gs/open5gs/issues/4271
https://github.com/open5gs/open5gs/issues/4271#event-21968630023
https://github.com/open5gs/open5gs/issues/4271#issue-3795147720