PT-2026-5141 · Open5Gs · Open5Gs

Frankylin · Published 2026-01-28 · Updated 2026-02-02 · CVE-2026-1522

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.7

Description A flaw exists in Open5GS up to version 2.7.6 that can lead to a denial of service. The issue is located in the sgwc s5c handle modify bearer response function within the src/sgwc/s5c-handler.c file of the SGWC component. The vulnerability can be exploited remotely. The exploit is publicly available.

Recommendations Apply patch b19cf6a to resolve this issue.

Exploit

Fix

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2026-1522

Affected Products

Open5Gs

References · 12

• 🔥 https://github.com/open5gs/open5gs/issues/4266#issue-3794991595 · Exploit
• 🔥 https://github.com/open5gs/open5gs/issues/4266#event-21968568116 · Exploit
• 🔥 https://vuldb.com/?submit.738371 · Exploit
• https://github.com/open5gs/open5gs/commit/b19cf6a · Patch
• https://github.com/open5gs/open5gs/issues/4266 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-1522 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1522 · Security Note
• https://github.com/open5gs/open5gs · Note
• https://vuldb.com/?id.343193 · Note
• https://vuldb.com/?ctiid.343193 · Note
• https://t.me/cveNotify/150627 · Telegram Post
• https://twitter.com/CVEnew/status/2016562114283143664 · Twitter Post