CVE-2026-90707
Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free
CVSS Score
8.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf_nnrf_try_old_amf_discovery_fallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discovery_option results in use after free. The attack may be performed from remote. The patch is identified as ddd683a35f8aaac2b7b9884a24cd53bddfc65238. Applying a patch is advised to resolve this issue.
| CWE | CWE-416 CWE-119 |
| Vendor | n/a |
| Product | open5gs |
| Published | Sep 14, 2026 |
| Last Updated | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new high vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:X/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.0 2.1 2.2 2.3 2.4 2.5 2.6 2.7
References
vuldb.com: https://vuldb.com/vuln/403249 vuldb.com: https://vuldb.com/vuln/403249/cti vuldb.com: https://vuldb.com/cve/CVE-2026-90707 vuldb.com: https://vuldb.com/submit/918267 github.com: https://github.com/open5gs/open5gs/pull/4698 github.com: https://github.com/open5gs/open5gs/commit/ddd683a35f8aaac2b7b9884a24cd53bddfc65238 github.com: https://github.com/open5gs/open5gs/
Credits
🔍 centauruszzz (VulDB User)