Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2026-82548: Magma 1.9.0 can leak data to remote attackers
CVE-2026-82548 · published 2 months ago
Summary
The Magma 1.9.0 software can unintentionally reveal internal information to anyone on the network. This could let outsiders learn details about your system that should stay private. Apply the latest security update or upgrade to a newer version of Magma as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux foundation | magma | 1.9.0 |
Original advisory text
Linux Foundation Magma InitialUEMessage information disclosure
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
References
- https://vuldb.com/vuln/397064 Vendor Advisory
- https://www.linuxfoundation.org/ URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82548... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-82548 Vendor Advisory
- https://vuldb.com/cve/CVE-2026-82548 Vendor Advisory
- https://vuldb.com/submit/891573 Vendor Advisory
- https://github.com/magma/magma/issues/16022 Third Party Advisory
- https://vuldb.com/vuln/397064/cti Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
7.8
High
Type
CWE-200Information Exposure
CWE-284Improper Access Control
Timeline
Published30 Aug 2026
Updated4 Nov 2026
First seen30 Aug 2026
Track software like this
Free during beta