CVE-2026-7707
Open5GS UDR nudr-handler.c udr_nudr_dr_handle_subscription_context denial of service
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the argument pei results in denial of service. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-404 |
| Vendor | n/a |
| Product | open5gs |
| Published | May 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new medium vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.7.0 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5 2.7.6 2.7.7
References
vuldb.com: https://vuldb.com/vuln/360883 vuldb.com: https://vuldb.com/vuln/360883/cti vuldb.com: https://vuldb.com/submit/805699 vuldb.com: https://vuldb.com/submit/805700 github.com: https://github.com/open5gs/open5gs/issues/4410 github.com: https://github.com/open5gs/open5gs/issues/4411 github.com: https://github.com/open5gs/open5gs/
Credits
🔍 FrankyLin (VulDB User) VulDB CNA Team