Remote Code Execution Vulnerability in Open5GS SMF Component
CVE-2026-82590

5.3MEDIUM

Key Information:

Vendor

Open5GS

Status
Open5gs
Vendor
CVE Published:
30 August 2026

What is CVE-2026-82590?

A vulnerability has been detected in Open5GS versions up to and including 2.7.7, specifically within the SMF component's function smf_nudm_sdm_handle_get located in src/smf/nudm-handler.c. This weakness allows for remote manipulation of the argument preemptCap, potentially leading to a reachable assertion and denial of service. Users are advised to upgrade to version 2.8.0, which includes the necessary patches to eliminate this risk. Ensure that you implement this upgrade promptly to maintain system integrity and security.

Affected Version(s)

Open5GS 2.7.0

Open5GS 2.7.1

Open5GS 2.7.2

References

https://vuldb.com/vuln/397085
vdb-entrytechnical-description
https://vuldb.com/vuln/397085/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82590
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ZiyuLin (VulDB User)
.