Reachable Assertion Vulnerability in Open5GS Component
CVE-2026-30047

7.5HIGH

Key Information:

Vendor: Open5GS
Status: Open5GS
Vendor: CVE Published:; 27 August 2026

What is CVE-2026-30047?

A reachable assertion vulnerability has been identified in the /nsmf-pdusession/v1/sm-contexts component of Open5GS version 2.7.6. This flaw allows attackers to trigger a Denial of Service (DoS) by sending a specially crafted DELETE request, potentially disrupting service availability. Security measures should be implemented promptly to mitigate risks associated with this vulnerability.

References

https://github.com/open5gs/open5gs/issues/4201

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 27, 2026
Vulnerability Reserved
Mar 4, 2026

CVE-2026-30047 Data

JSON