CVE-2026-1736
MEDIUMOpen5GS <2.7.6 - Reachable Assertion
Title source: llmDescription
A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request of the file /src/sgwc/s11-handler.c of the component SGWC. Such manipulation leads to reachable assertion. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. A patch should be applied to remediate this issue. The issue report is flagged as already-fixed.
References (7)
Scores
CVSS v3
5.3
EPSS
0.0004
EPSS Percentile
10.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Classification
CWE
CWE-617
Status
published
Affected Products (1)
open5gs/open5gs
< 2.7.6
Timeline
Published
Feb 02, 2026
Tracked Since
Feb 18, 2026