PT-2026-6770 · Open5Gs · Open5Gs

Frankylin · Published 2026-02-06 · Updated 2026-02-06 · CVE-2026-2062

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open5GS versions up to 2.7.6

Description A flaw exists in Open5GS impacting the sgwc s5c handle modify bearer response/sgwc sxa handle session modification response function within the PGW S5U Address Handler component. This can lead to a null pointer dereference, potentially allowing for remote exploitation. The exploit is publicly available.

Recommendations Apply the patch with identifier f1bbd7b57f831e2a070780a7d8d5d4c73babdb59.

Exploit

Fix

NULL Pointer Dereference

Improper Resource Release

Weakness Enumeration

CWE-476

CWE-404

Related Identifiers

CVE-2026-2062

Affected Products

Open5Gs

References · 11

• 🔥 https://github.com/open5gs/open5gs/issues/4257#issue-3787701521 · Exploit
• https://github.com/open5gs/open5gs/issues/4257 · Vendor Advisory
• https://github.com/open5gs/open5gs/commit/f1bbd7b57f831e2a070780a7d8d5d4c73babdb59 · Patch
• https://osv.dev/vulnerability/CVE-2026-2062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2062 · Security Note
• https://t.me/CVEtracker/43951 · Telegram Post
• https://vuldb.com/?id.344622 · Note
• https://github.com/open5gs/open5gs · Note
• https://twitter.com/CVEnew/status/2019857599710019584 · Twitter Post
• https://vuldb.com/?submit.744719 · Note
• https://vuldb.com/?ctiid.344622 · Note