# Open5GS. Every CVE that names Open5GS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service](https://agentprime.io/advisories/CVE-2026-8226.md) `CVE-2026-8226` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service - [Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of service](https://agentprime.io/advisories/CVE-2026-8225.md) `CVE-2026-8225` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service - [Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of service](https://agentprime.io/advisories/CVE-2026-8224.md) `CVE-2026-8224` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service - [Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of service](https://agentprime.io/advisories/CVE-2026-8223.md) `CVE-2026-8223` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service - [Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_management_handle_register denial of service](https://agentprime.io/advisories/CVE-2026-8222.md) `CVE-2026-8222` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 May 2026 · Tags: Denial of service - [Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-of-bounds](https://agentprime.io/advisories/CVE-2026-8186.md) `CVE-2026-8186` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 9 May 2026 · Tags: Memory corruption - [Open5GS UPF gtp-path.c \_gtpv1_u_recv_cb resource consumption](https://agentprime.io/advisories/CVE-2026-8187.md) `CVE-2026-8187` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 9 May 2026 · Tags: Denial of service - [Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service](https://agentprime.io/advisories/CVE-2026-8123.md) `CVE-2026-8123` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Denial of service - [Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_names denial of service](https://agentprime.io/advisories/CVE-2026-8122.md) `CVE-2026-8122` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Denial of service - [Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of service](https://agentprime.io/advisories/CVE-2026-8121.md) `CVE-2026-8121` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Denial of service - [Open5GS NSSF nnssf-handler.c denial of service](https://agentprime.io/advisories/CVE-2026-8120.md) `CVE-2026-8120` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Denial of service - [Open5GS NSSF nghttp2-server.c ogs_sbi_stream_find_by_id denial of service](https://agentprime.io/advisories/CVE-2026-8119.md) `CVE-2026-8119` · CVE record: Open5GS · CVSS 4.8 Medium · Not analysed yet · Published 8 May 2026 · Tags: Denial of service - [Open5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of service](https://agentprime.io/advisories/CVE-2026-7781.md) `CVE-2026-7781` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Denial of service - [Open5GS smf-registrations Endpoint udm-sm.c udm_state_operational denial of service](https://agentprime.io/advisories/CVE-2026-7780.md) `CVE-2026-7780` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Denial of service - [Open5GS authentication-subscription Endpoint nudr-handler.c udm_nudr_dr_handle_subscription_authentication denial of service](https://agentprime.io/advisories/CVE-2026-7779.md) `CVE-2026-7779` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Denial of service - [Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service](https://agentprime.io/advisories/CVE-2026-7708.md) `CVE-2026-7708` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Denial of service - [Open5GS UDR nudr-handler.c udr_nudr_dr_handle_subscription_context denial of service](https://agentprime.io/advisories/CVE-2026-7707.md) `CVE-2026-7707` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Denial of service - [Open5GS AMF gmm-handler.c gmm_handle_service_request denial of service](https://agentprime.io/advisories/CVE-2026-7706.md) `CVE-2026-7706` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Denial of service - [Open5GS AMF gmm-handler.c denial of service](https://agentprime.io/advisories/CVE-2026-7601.md) `CVE-2026-7601` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Denial of service - [Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service](https://agentprime.io/advisories/CVE-2026-7587.md) `CVE-2026-7587` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: Denial of service - [Open5GS AMF nudm-handler.c ogs_id_get_value denial of service](https://agentprime.io/advisories/CVE-2026-7586.md) `CVE-2026-7586` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: Denial of service - [Open5GS AMF nudm-handler.c amf_nudm_sdm_handle_provisioned denial of service](https://agentprime.io/advisories/CVE-2026-7585.md) `CVE-2026-7585` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: Denial of service - [Open5GS BSF context.c bsf_sess_find_by_ipv6prefix denial of service](https://agentprime.io/advisories/CVE-2026-7583.md) `CVE-2026-7583` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: Denial of service - [Open5GS BSF pcfBindings bsf_sess_add_by_ip_address denial of service](https://agentprime.io/advisories/CVE-2026-7536.md) `CVE-2026-7536` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Denial of service - [Open5GS transfer-update denial of service](https://agentprime.io/advisories/CVE-2026-7535.md) `CVE-2026-7535` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: Denial of service - [Open5GS AMF SBI Endpoint sdmsubscription-notify amf_namf_callback_handle_sdm_data_change_notify denial of service](https://agentprime.io/advisories/CVE-2026-7518.md) `CVE-2026-7518` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: Denial of service - [Open5GS CCA Message smf_s6b denial of service](https://agentprime.io/advisories/CVE-2026-4988.md) `CVE-2026-4988` · CVE record: Open5GS · CVSS 6.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Denial of service - [Open5GS CCA smf_s6b_sta_cb denial of service](https://agentprime.io/advisories/CVE-2026-4240.md) `CVE-2026-4240` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Denial of service - [Open5GS MME mme_s11_handle_create_session_response denial of service](https://agentprime.io/advisories/CVE-2026-2524.md) `CVE-2026-2524` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 16 Feb 2026 · Tags: Denial of service - [Open5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion](https://agentprime.io/advisories/CVE-2026-2523.md) `CVE-2026-2523` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 16 Feb 2026 · Tags: Denial of service - [Open5GS MME esm-build.c memory corruption](https://agentprime.io/advisories/CVE-2026-2522.md) `CVE-2026-2522` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 15 Feb 2026 · Tags: Memory corruption - [Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption](https://agentprime.io/advisories/CVE-2026-2521.md) `CVE-2026-2521` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 15 Feb 2026 · Tags: Memory corruption - [Open5GS SMF types.c ogs_gtp2_parse_tft denial of service](https://agentprime.io/advisories/CVE-2026-2517.md) `CVE-2026-2517` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 15 Feb 2026 · Tags: Denial of service - [Open5GS PGW S5U Address sgwc_sxa_handle_session_modification_response null pointer dereference](https://agentprime.io/advisories/CVE-2026-2062.md) `CVE-2026-2062` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Denial of service, Memory corruption - [Open5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflow](https://agentprime.io/advisories/CVE-2025-15555.md) `CVE-2025-15555` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 4 Feb 2026 · Tags: Memory corruption - [Open5GS SGWC context.c sgwc_tunnel_add assertion](https://agentprime.io/advisories/CVE-2026-1738.md) `CVE-2026-1738` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Denial of service - [Open5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertion](https://agentprime.io/advisories/CVE-2026-1737.md) `CVE-2026-1737` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Denial of service - [Open5GS SGWC s11-handler.c assertion](https://agentprime.io/advisories/CVE-2026-1736.md) `CVE-2026-1736` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Denial of service - [Open5GS SGWC s11-handler.c sgwc_s11_handle_modify_bearer_request denial of service](https://agentprime.io/advisories/CVE-2026-1587.md) `CVE-2026-1587` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: Denial of service - [Open5GS SGWC s11-handler.c ogs_gtp2_f_teid_to_ip denial of service](https://agentprime.io/advisories/CVE-2026-1586.md) `CVE-2026-1586` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: Denial of service - [Open5GS SGWC s5c-handler.c sgwc_s5c_handle_modify_bearer_response denial of service](https://agentprime.io/advisories/CVE-2026-1522.md) `CVE-2026-1522` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: Denial of service - [Open5GS SGWC s5c-handler.c denial of service](https://agentprime.io/advisories/CVE-2026-1521.md) `CVE-2026-1521` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: Denial of service - [Open5GS sgwc s11-handler.c sgwc_s11_handle_downlink_data_notification_ack denial of service](https://agentprime.io/advisories/CVE-2025-15539.md) `CVE-2025-15539` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 18 Jan 2026 · Tags: Denial of service - [Open5GS Timer resource consumption](https://agentprime.io/advisories/CVE-2025-15532.md) `CVE-2025-15532` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 17 Jan 2026 · Tags: Denial of service - [Open5GS context.c sgwc_bearer_add assertion](https://agentprime.io/advisories/CVE-2025-15531.md) `CVE-2025-15531` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 17 Jan 2026 · Tags: Denial of service - [Open5GS s11-handler.c assertion](https://agentprime.io/advisories/CVE-2025-15530.md) `CVE-2025-15530` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 17 Jan 2026 · Tags: Denial of service - [Open5GS s5c-handler.c sgwc_s5c_handle_create_session_response denial of service](https://agentprime.io/advisories/CVE-2025-15529.md) `CVE-2025-15529` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: Denial of service - [Open5GS GTPv2 Bearer Response denial of service](https://agentprime.io/advisories/CVE-2025-15528.md) `CVE-2025-15528` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: Denial of service - [Open5GS GTPv2-C Flow s5c-handler.c sgwc_s5c_handle_create_session_response denial of service](https://agentprime.io/advisories/CVE-2025-15419.md) `CVE-2025-15419` · CVE record: Open5GS · CVSS 4.8 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Denial of service - [Open5GS Bearer QoS IE Length types.c ogs_gtp2_parse_bearer_qos denial of service](https://agentprime.io/advisories/CVE-2025-15418.md) `CVE-2025-15418` · CVE record: Open5GS · CVSS 4.8 Medium · Not analysed yet · Published 1 Jan 2026 · Tags: Denial of service - [Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service](https://agentprime.io/advisories/CVE-2025-15417.md) `CVE-2025-15417` · CVE record: Open5GS · CVSS 4.8 Medium · Not analysed yet · Published 1 Jan 2026 · Tags: Denial of service - [Open5GS PFCP Session Establishment Request rule-match.c ogs_pfcp_pdr_rule_find_by_packet assertion](https://agentprime.io/advisories/CVE-2025-15176.md) `CVE-2025-15176` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 29 Dec 2025 · Tags: Denial of service - [Open5GS PFCP handler.c ogs_pfcp_handle_create_pdr initialization](https://agentprime.io/advisories/CVE-2025-14955.md) `CVE-2025-14955` · CVE record: Open5GS · CVSS 6.3 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: CWE-665 - [Open5GS QER/FAR/URR/PDR context.c ogs_pfcp_qer_find_or_add assertion](https://agentprime.io/advisories/CVE-2025-14954.md) `CVE-2025-14954` · CVE record: Open5GS · CVSS 6.3 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: Denial of service - [Open5GS FAR-ID handler.c ogs_pfcp_handle_create_pdr null pointer dereference](https://agentprime.io/advisories/CVE-2025-14953.md) `CVE-2025-14953` · CVE record: Open5GS · CVSS 2.3 Low · Not analysed yet · Published 19 Dec 2025 · Tags: Denial of service, Memory corruption - [Open5GS gmm-sm.c gmm_state_exception assertion](https://agentprime.io/advisories/CVE-2025-9405.md) `CVE-2025-9405` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: Denial of service - [Open5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of service](https://agentprime.io/advisories/CVE-2025-8805.md) `CVE-2025-8805` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2025 · Tags: Denial of service - [Open5GS AMF ngap_build_downlink_nas_transport assertion](https://agentprime.io/advisories/CVE-2025-8804.md) `CVE-2025-8804` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2025 · Tags: Denial of service - [Open5GS AMF gmm-sm.c gmm_state_exception denial of service](https://agentprime.io/advisories/CVE-2025-8803.md) `CVE-2025-8803` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2025 · Tags: Denial of service - [Open5GS SMF smf-sm.c smf_state_operational denial of service](https://agentprime.io/advisories/CVE-2025-8802.md) `CVE-2025-8802` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2025 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .