CVE-2026-91855
Open5GS PFCP Message handler.c denial of service
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality of the file lib/pfcp/handler.c of the component PFCP Message Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The patch is named 028e1dbb5e3271035ccee906ef417a97fc523f71. Applying a patch is the recommended action to fix this issue. CVE-2025-29339 describes a different assertion failure vulnerability in Open5GS UPF.
| CWE | CWE-404 |
| Vendor | n/a |
| Product | open5gs |
| Published | Sep 15, 2026 |
| Last Updated | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new medium vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.7.0 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5 2.7.6 2.7.7
References
vuldb.com: https://vuldb.com/vuln/404086 vuldb.com: https://vuldb.com/vuln/404086/cti vuldb.com: https://vuldb.com/cve/CVE-2026-91855 vuldb.com: https://vuldb.com/submit/933834 github.com: https://github.com/open5gs/open5gs/issues/4699 github.com: https://github.com/open5gs/open5gs/commit/028e1dbb5e3271035ccee906ef417a97fc523f71 github.com: https://github.com/open5gs/open5gs/
Credits
🔍 ea1809 (VulDB User)