CVE-2026-2522
Open5GS MME esm-build.c memory corruption
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the component MME. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-119 |
| Vendor | n/a |
| Product | open5gs |
| Published | Feb 15, 2026 |
| Last Updated | Feb 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new medium vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.7.0 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5 2.7.6
References
vuldb.com: https://vuldb.com/?id.346110 vuldb.com: https://vuldb.com/?ctiid.346110 vuldb.com: https://vuldb.com/?submit.738336 github.com: https://github.com/open5gs/open5gs/issues/4283 github.com: https://github.com/open5gs/open5gs/issues/4283#issue-3807916595 github.com: https://github.com/open5gs/open5gs/
Credits
🔍 FrankyLin (VulDB User)