CVE-2026-1736

MEDIUM

Open5GS <2.7.6 - Reachable Assertion

Title source: llm

Description

A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request of the file /src/sgwc/s11-handler.c of the component SGWC. Such manipulation leads to reachable assertion. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. A patch should be applied to remediate this issue. The issue report is flagged as already-fixed.

Scores

CVSS v3 5.3
EPSS 0.0004
EPSS Percentile 10.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Classification

CWE
CWE-617
Status published

Affected Products (1)

open5gs/open5gs < 2.7.6

Timeline

Published Feb 02, 2026
Tracked Since Feb 18, 2026