# open5gs. Every CVE that names open5gs among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output](https://agentprime.io/advisories/CVE-2026-116544.md) `CVE-2026-116544` · CVE record: open5gs open5gs · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Memory corruption - [Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser](https://agentprime.io/advisories/CVE-2026-116543.md) `CVE-2026-116543` · CVE record: open5gs open5gs · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Memory corruption - [Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request](https://agentprime.io/advisories/CVE-2026-108105.md) `CVE-2026-108105` · CVE record: open5gs open5gs · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service - [Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE](https://agentprime.io/advisories/CVE-2026-108103.md) `CVE-2026-108103` · CVE record: open5gs open5gs · CVSS 6.9 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE](https://agentprime.io/advisories/CVE-2026-108102.md) `CVE-2026-108102` · CVE record: open5gs open5gs · CVSS 6.9 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources](https://agentprime.io/advisories/CVE-2026-107166.md) `CVE-2026-107166` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service - [Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference](https://agentprime.io/advisories/CVE-2026-92417.md) `CVE-2026-92417` · CVE record: Open5GS · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service, Memory corruption - [Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertion](https://agentprime.io/advisories/CVE-2026-92416.md) `CVE-2026-92416` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service - [Open5GS PFCP Message handler.c denial of service](https://agentprime.io/advisories/CVE-2026-91855.md) `CVE-2026-91855` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free](https://agentprime.io/advisories/CVE-2026-90707.md) `CVE-2026-90707` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Open5GS AMF/MME improper authorization](https://agentprime.io/advisories/CVE-2026-86212.md) `CVE-2026-86212` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Privilege escalation, Broken access control - [Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion](https://agentprime.io/advisories/CVE-2026-82590.md) `CVE-2026-82590` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Denial of service - [Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service](https://agentprime.io/advisories/CVE-2026-82589.md) `CVE-2026-82589` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Denial of service - [Open5GS Transfer Endpoint namf-handler.c null pointer dereference](https://agentprime.io/advisories/CVE-2026-82588.md) `CVE-2026-82588` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Denial of service, Memory corruption - [Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption](https://agentprime.io/advisories/CVE-2026-82587.md) `CVE-2026-82587` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Memory corruption - [Open5GS HSS hss-cx-path.c assertion](https://agentprime.io/advisories/CVE-2026-78186.md) `CVE-2026-78186` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Denial of service - [Open5GS AMF UEContextReleaseRequest Path improper authorization](https://agentprime.io/advisories/CVE-2026-78158.md) `CVE-2026-78158` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation, Broken access control - [Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds](https://agentprime.io/advisories/CVE-2026-78157.md) `CVE-2026-78157` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Memory corruption - [Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow](https://agentprime.io/advisories/CVE-2026-78156.md) `CVE-2026-78156` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 23 Aug 2026 · Tags: Memory corruption - [Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service](https://agentprime.io/advisories/CVE-2025-15687.md) `CVE-2025-15687` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Open5GS HSS Service fd_msg_sess_get denial of service](https://agentprime.io/advisories/CVE-2025-15686.md) `CVE-2025-15686` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Open5GS freeDiameter memory corruption](https://agentprime.io/advisories/CVE-2025-15685.md) `CVE-2025-15685` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Memory corruption - [Open5GS CER init.c diam_log_func assertion](https://agentprime.io/advisories/CVE-2025-15684.md) `CVE-2025-15684` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow](https://agentprime.io/advisories/CVE-2024-14044.md) `CVE-2024-14044` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Memory corruption - [Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow](https://agentprime.io/advisories/CVE-2024-14043.md) `CVE-2024-14043` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption - [Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow](https://agentprime.io/advisories/CVE-2024-14042.md) `CVE-2024-14042` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption - [Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler](https://agentprime.io/advisories/CVE-2026-15720.md) `CVE-2026-15720` · CVE record: open5gs open5gs · CVSS 8.6 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption - [Open5GS AMF context.c amf_context_final use after free](https://agentprime.io/advisories/CVE-2026-15194.md) `CVE-2026-15194` · CVE record: Open5GS · CVSS 4.8 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service](https://agentprime.io/advisories/CVE-2026-14618.md) `CVE-2026-14618` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Denial of service - [Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode race condition](https://agentprime.io/advisories/CVE-2026-10565.md) `CVE-2026-10565` · CVE record: Open5GS · CVSS 2.3 Low · Not analysed yet · Published 2 Jun 2026 · Tags: Race condition - [Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication](https://agentprime.io/advisories/CVE-2026-10157.md) `CVE-2026-10157` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 31 May 2026 · Tags: Authentication bypass - [Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption](https://agentprime.io/advisories/CVE-2026-10156.md) `CVE-2026-10156` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2026 · Tags: Denial of service - [Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service](https://agentprime.io/advisories/CVE-2026-10117.md) `CVE-2026-10117` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2026 · Tags: Denial of service - [Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of service](https://agentprime.io/advisories/CVE-2026-10116.md) `CVE-2026-10116` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2026 · Tags: Denial of service - [Open5GS Shared NF-profile nnrf-handler.c denial of service](https://agentprime.io/advisories/CVE-2026-10115.md) `CVE-2026-10115` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2026 · Tags: Denial of service - [Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write](https://agentprime.io/advisories/CVE-2026-10114.md) `CVE-2026-10114` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2026 · Tags: Memory corruption - [Open5GS Shared NF-profile nnrf-handler.c denial of service](https://agentprime.io/advisories/CVE-2026-10113.md) `CVE-2026-10113` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2026 · Tags: Denial of service - [Open5GS NRF nghttp2-server.c discover_handler use after free](https://agentprime.io/advisories/CVE-2026-8746.md) `CVE-2026-8746` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Memory corruption - [Open5GS AUSF nausf-handler.c ogs_timer_add denial of service](https://agentprime.io/advisories/CVE-2026-8745.md) `CVE-2026-8745` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Denial of service - [Open5GS NRF context.c ogs_sbi_nf_service_add denial of service](https://agentprime.io/advisories/CVE-2026-8744.md) `CVE-2026-8744` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Denial of service - [Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization](https://agentprime.io/advisories/CVE-2026-8743.md) `CVE-2026-8743` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Privilege escalation, Broken access control - [Open5GS NRF client.c ogs_sbi_client_add denial of service](https://agentprime.io/advisories/CVE-2026-8731.md) `CVE-2026-8731` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Denial of service - [Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service](https://agentprime.io/advisories/CVE-2026-8730.md) `CVE-2026-8730` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Denial of service - [Open5GS NRF message.c denial of service](https://agentprime.io/advisories/CVE-2026-8729.md) `CVE-2026-8729` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Denial of service - [Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of service](https://agentprime.io/advisories/CVE-2026-8728.md) `CVE-2026-8728` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Denial of service - [Open5GS NRF conv.c yuarel_parse denial of service](https://agentprime.io/advisories/CVE-2026-8292.md) `CVE-2026-8292` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service](https://agentprime.io/advisories/CVE-2026-8291.md) `CVE-2026-8291` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service](https://agentprime.io/advisories/CVE-2026-8290.md) `CVE-2026-8290` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service](https://agentprime.io/advisories/CVE-2026-8289.md) `CVE-2026-8289` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF gsm-handler.c denial of service](https://agentprime.io/advisories/CVE-2026-8288.md) `CVE-2026-8288` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF ogs_nas_parse_qos_rules denial of service](https://agentprime.io/advisories/CVE-2026-8270.md) `CVE-2026-8270` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF smf_nsmf_handle_create_sm_context denial of service](https://agentprime.io/advisories/CVE-2026-8269.md) `CVE-2026-8269` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF OpenAPI_list_create denial of service](https://agentprime.io/advisories/CVE-2026-8268.md) `CVE-2026-8268` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of service](https://agentprime.io/advisories/CVE-2026-8267.md) `CVE-2026-8267` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_accept denial of service](https://agentprime.io/advisories/CVE-2026-8266.md) `CVE-2026-8266` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Denial of service - [Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference](https://agentprime.io/advisories/CVE-2026-8252.md) `CVE-2026-8252` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service, Memory corruption - [Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service](https://agentprime.io/advisories/CVE-2026-8251.md) `CVE-2026-8251` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service - [Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list denial of service](https://agentprime.io/advisories/CVE-2026-8250.md) `CVE-2026-8250` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service - [Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service](https://agentprime.io/advisories/CVE-2026-8249.md) `CVE-2026-8249` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service - [Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service](https://agentprime.io/advisories/CVE-2026-8248.md) `CVE-2026-8248` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .