CVE-2026-10157
Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication
CVSS Score
7.3
EPSS Score
0.1%
EPSS Percentile
26th
A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The identifier of the patch is a188e36b1741ffc2252133f59b1bda4f14d3cb5c. It is suggested to install a patch to address this issue.
| CWE | CWE-287 |
| Vendor | n/a |
| Product | open5gs |
| Published | May 31, 2026 |
| Last Updated | Jun 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new high vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.7.0 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5 2.7.6
References
vuldb.com: https://vuldb.com/vuln/367410 vuldb.com: https://vuldb.com/vuln/367410/cti vuldb.com: https://vuldb.com/cve/CVE-2026-10157 vuldb.com: https://vuldb.com/submit/818939 github.com: https://github.com/open5gs/open5gs/issues/4393 github.com: https://github.com/open5gs/open5gs/pull/4557 github.com: https://github.com/open5gs/open5gs/commit/a188e36b1741ffc2252133f59b1bda4f14d3cb5c github.com: https://github.com/open5gs/open5gs/
Credits
Seungjoon Na (Kookmin University ICSR Lab) Jinha Kim (Kookmin University ICSR Lab) 🔍 Seungjoon Na (VulDB User) Seungjoon Na (VulDB User)