Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Open5GS SGW-C can corrupt memory remotely

CVE-2026-2521 · published 8 months ago
Summary

The SGW-C component in Open5GS versions up to 2.7.6 can be tricked into overwriting its own memory when it processes a crafted response. An attacker on the network could cause this from a distance, potentially leading to service disruption or further compromise. Update Open5GS to a version that includes the fix or apply the vendor's recommended patch as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
open5gs open5gs <= 2.7.6
cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
Original advisory text
Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption
A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can lead to memory corruption. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published15 Feb 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2026-2521 · NVD
CVE-2026-2521 · OSV
Track software like this
Free during beta