CVE-2026-10113

MEDIUM

Open5GS Shared NF-profile nnrf-handler.c denial of service

Title source: cna
STIX 2.1

Description

A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been made public and could be used. A patch should be applied to remediate this issue.

References (6)

Core 6
Core References
Vdb Entry vdb-entry
VDB-367291 | Open5GS Shared NF-profile nnrf-handler.c denial of service
https://vuldb.com/vuln/367291
Signature, Permissions Required signature permissions-required
VDB-367291 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/367291/cti
Third Party Advisory third-party-advisory
Submit #818581 | Open5GS NRF/AMF/AUSF/BSF/NSSF/PCF/SMF/UDM/UDR v2.7.7 Denial of Service
https://vuldb.com/submit/818581
Exploit exploit issue-tracking
https://github.com/open5gs/open5gs/issues/4467

Scores

CVSS v3 4.3
EPSS 0.0030
EPSS Percentile 21.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (8)
None/Open5GS 2.7.0
None/Open5GS 2.7.1
None/Open5GS 2.7.2
None/Open5GS 2.7.3
None/Open5GS 2.7.4
None/Open5GS 2.7.5
None/Open5GS 2.7.6
None/Open5GS 2.7.7
Published May 30, 2026
Tracked Since May 30, 2026