CVE-2026-4240
- Source
- https://cve.org/CVERecord?id=CVE-2026-4240
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4240.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-4240
- Published
- 2026-03-16T13:32:09Z
- Modified
- 2026-10-28T10:59:19Z
- Severity
-
- 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
- Summary
- Open5GS CCA smf_s6b_sta_cb denial of service
- Details
-
A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b_aaa_cb/smf_s6b_sta_cb of the component CCA Handler. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.7.7 is sufficient to fix this issue. Patch name: 80eb484a6ab32968e755e628b70d1a9c64f012ec. Upgrading the affected component is recommended.
- Database specific
{ "cna_assigner": "VulDB", "cwe_ids": [ "CWE-404" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4240.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "introduced": "2.7.3" }, { "last_affected": "2.7.3" }, { "introduced": "2.7.4" }, { "last_affected": "2.7.4" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] } ] }- References
-
- https://github.com/open5gs/open5gs/
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4240.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-4240
- https://vuldb.com/?id.351182
- https://vuldb.com/?submit.771361
- https://github.com/open5gs/open5gs/issues/4343
- https://github.com/open5gs/open5gs/issues/4343#issue-4021871895
- https://vuldb.com/?ctiid.351182
- https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec
- https://github.com/open5gs/open5gs/releases/tag/v2.7.7
Affected packages
Git / github.com/open5gs/open5gs
Affected ranges
- Type
- GIT
- Repo
- https://github.com/open5gs/open5gs
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "2.7.0" }, { "last_affected": "2.7.0" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.7.1" }, { "last_affected": "2.7.1" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.7.2" }, { "last_affected": "2.7.2" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.7.5" }, { "last_affected": "2.7.5" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.7.6" }, { "last_affected": "2.7.6" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "fixed": "80eb484a6ab32968e755e628b70d1a9c64f012ec" } ], "source": "REFERENCES_COMMIT" }, { "original_tag": "v2.7.7", "range": [ { "fixed": "318eeb49a7dcdff733dec60e02d9c60aefca2fb9" } ], "source": "REFERENCES_TAG" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4240.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"286832280686897877386663269906374356152",
"237047032260203517884579827715635620405",
"116524115645494846346800667577386580350",
"291154197191466349190884344106472321044",
"53099392610014375379891174915329441325"
],
"threshold": 0.9
},
"id": "CVE-2026-4240-097f0c1e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec",
"target": {
"file": "src/smf/gy-path.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "130296096657943261152918749756700875650",
"length": 4319
},
"id": "CVE-2026-4240-2f75c394",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec",
"target": {
"file": "src/smf/s6b-path.c",
"function": "smf_s6b_sta_cb"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "92942622530081123800530463779408980798",
"length": 4316
},
"id": "CVE-2026-4240-868baa39",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec",
"target": {
"file": "src/smf/s6b-path.c",
"function": "smf_s6b_aaa_cb"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "48066293071339186820413693103493647171",
"length": 8508
},
"id": "CVE-2026-4240-9e3e4749",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec",
"target": {
"file": "src/smf/gy-path.c",
"function": "smf_gy_cca_cb"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"173173611972938205206480386988927771189",
"237047032260203517884579827715635620405",
"261541326721294318550410748630230460168",
"83047868071616557476164884720546196498",
"67408004420327051982254656160822854663",
"237047032260203517884579827715635620405",
"261541326721294318550410748630230460168",
"83047868071616557476164884720546196498",
"67408004420327051982254656160822854663"
],
"threshold": 0.9
},
"id": "CVE-2026-4240-b7b2fbba",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec",
"target": {
"file": "src/smf/s6b-path.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "110292961675724856263265827935457661500",
"length": 10609
},
"id": "CVE-2026-4240-c19707cc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec",
"target": {
"file": "src/smf/gx-path.c",
"function": "smf_gx_cca_cb"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"312222335752906932391640947031498928207",
"237047032260203517884579827715635620405",
"261541326721294318550410748630230460168",
"197094743083022473270121504420999007094",
"260351164589364287184851166644780048951"
],
"threshold": 0.9
},
"id": "CVE-2026-4240-d237e515",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f012ec",
"target": {
"file": "src/smf/gx-path.c"
}
}
]
vanir_signatures_modified
"2026-10-28T10:59:19Z"