PT-2026-41535 · Open5Gs · Open5Gs

Jinha Kim + 1 · Published 2026-05-17 · Updated 2026-05-17 · CVE-2026-8743

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.7

Description An improper authorization issue exists in the AMF/MME component within the ran ue find by amf ue ngap id() function of the src/amf/context.c file. This flaw allows a remote attacker to perform a manipulation that results in improper authorization.

Recommendations Install patch 5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1. As a temporary workaround, restrict access to the ran ue find by amf ue ngap id() function to minimize the risk of exploitation.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-8743

Affected Products

Open5Gs

References · 11

• 🔥 https://github.com/open5gs/open5gs/issues/4498 · Exploit
• https://github.com/open5gs/open5gs/pull/4553 · Patch
• https://github.com/open5gs/open5gs/commit/5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-8743 · Security Note
• https://twitter.com/VulmonFeeds/status/2055969406082044241 · Twitter Post
• https://vuldb.com/vuln/364330 · Note
• https://github.com/open5gs/open5gs · Note
• https://vuldb.com/submit/814559 · Note
• https://vuldb.com/vuln/364330/cti · Note
• https://t.me/CVEtracker/54042 · Telegram Post
• https://t.me/cveNotify/163771 · Telegram Post