Open5gs

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 213
    Known Exploited: 0
    2
    Critical Level Threats
    64
    High Level Threats
    131
    Medium Level Threats
    15
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-106806

    A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeated crafted requests can cause persistent heap growth, exhaust process memory, and terminate the affected Open5GS network function, resulting in denial of service.

    Last Modified: Nov 05, 2026
    Published: Nov 02, 2026

    CVE-2026-106807

    Denial of Service in open5GS PFCP Transaction Handling Causing SIGABRT

    Last Modified: Nov 02, 2026
    Published: Nov 02, 2026

    CVE-2026-116544

    Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output

    Last Modified: Oct 26, 2026
    Published: Oct 26, 2026

    CVE-2026-116543

    Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser

    Last Modified: Nov 02, 2026
    Published: Oct 26, 2026

    CVE-2026-108105

    Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request

    Last Modified: Oct 09, 2026
    Published: Oct 09, 2026
    Items Per Page
    Open5gs Vulnerabilities & Security CVEs | CVE-DB