CVE-2026-78156
Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow
CVSS Score
7.4
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hss_ogs_diam_s6a_air_cb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer overflow. The attack may be performed from remote. The name of the patch is a9c82ee0b590d76a581b0580cb46b598984e2392. A patch should be applied to remediate this issue.
| CWE | CWE-122 CWE-119 |
| Vendor | n/a |
| Product | open5gs |
| Published | Aug 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new high vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.8.0
References
vuldb.com: https://vuldb.com/vuln/394539 vuldb.com: https://vuldb.com/vuln/394539/cti vuldb.com: https://vuldb.com/cve/CVE-2026-78156 vuldb.com: https://vuldb.com/submit/882951 github.com: https://github.com/open5gs/open5gs/issues/4661 github.com: https://github.com/open5gs/open5gs/commit/a9c82ee0b590d76a581b0580cb46b598984e2392 github.com: https://github.com/open5gs/open5gs/
Credits
🔍 WeiYi (VulDB User)