CVE-2026-2521
Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can lead to memory corruption. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-119 |
| Vendor | n/a |
| Product | open5gs |
| Published | Feb 15, 2026 |
| Last Updated | Feb 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new medium vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.7.0 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5 2.7.6
References
vuldb.com: https://vuldb.com/?id.346109 vuldb.com: https://vuldb.com/?ctiid.346109 vuldb.com: https://vuldb.com/?submit.738334 github.com: https://github.com/open5gs/open5gs/issues/4282 github.com: https://github.com/open5gs/open5gs/issues/4282#issue-3807902188 github.com: https://github.com/open5gs/open5gs/
Credits
🔍 LinZiyu (VulDB User)