CVE-2026-2524

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-2524
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2524.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-2524
Published
2026-02-16T00:32:07Z
Modified
2026-08-12T03:51:30Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Open5GS MME mme_s11_handle_create_session_response denial of service
Details

A flaw has been found in Open5GS 2.7.6. The impacted element is the function mme_s11_handle_create_session_response of the component MME. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-404"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2524.json"
}
References

Affected packages

Git / github.com/open5gs/open5gs

Affected ranges

Type
GIT
Repo
https://github.com/open5gs/open5gs
Events
Introduced
d9d3abdd480be96fac3bc8a997e83446648763ca
Last Affected
d9d3abdd480be96fac3bc8a997e83446648763ca
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:open5gs:open5gs:2.7.6:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.7.6"
        },
        {
            "last_affected": "2.7.6"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

2.*
2.7.6
v2.*
v2.7.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2524.json"