PT-2026-5127 · Open5Gs · Open5Gs

Linziyu · Published 2026-01-28 · Updated 2026-01-28 · CVE-2026-1521

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open5GS versions through 2.7.6

Description A security flaw exists in Open5GS, potentially leading to a denial of service. The issue resides within the sgwc s5c handle bearer resource failure indication function located in the src/sgwc/s5c-handler.c file of the SGWC component. Manipulation of this function can trigger the denial of service. The attack can be initiated remotely, and an exploit has been publicly released.

Recommendations Apply the patch 69b53add90a9479d7960b822fc60601d659c328b to fix this issue.

Exploit

Fix

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2026-1521

Affected Products

Open5Gs

References · 13

• 🔥 https://github.com/open5gs/open5gs/issues/4268#issue-3795012861 · Exploit
• 🔥 https://vuldb.com/?submit.738370 · Exploit
• https://github.com/open5gs/open5gs/issues/4268 · Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4268#event-21989483261 · Vendor Advisory
• https://github.com/open5gs/open5gs/commit/69b53add90a9479d7960b822fc60601d659c328b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-1521 · Security Note
• https://osv.dev/vulnerability/CVE-2026-1521 · Vendor Advisory
• https://twitter.com/CVEnew/status/2016524856033005839 · Twitter Post
• https://t.me/CVEtracker/43159 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2016619756816662781 · Twitter Post
• https://github.com/open5gs/open5gs · Note
• https://vuldb.com/?id.343192 · Note
• https://vuldb.com/?ctiid.343192 · Note