CVE-2026-1586

low-risk
Published 2026-01-29

A flaw has been found in Open5GS up to 2.7.5. Impacted is the function ogs_gtp2_f_teid_to_ip of the file /sgwc/s11-handler.c of the component SGWC. Executing a manipulation can lead to denial of service. The attack may be performed from remote. The exploit has been published and may be used. It is advisable to implement a patch to correct this issue. The issue report is flagged as already-fixed.

Do I need to act?

-
0.11% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Open5Gs

References (7)

https://github.com/open5gs/open5gs/
Exploit https://github.com/open5gs/open5gs/issues/4273
Exploit https://github.com/open5gs/open5gs/issues/4273#event-21968643659
Exploit https://github.com/open5gs/open5gs/issues/4273#issue-3796030721
Permissions Required https://vuldb.com/?ctiid.343349
Third Party Advisory https://vuldb.com/?id.343349
Exploit https://vuldb.com/?submit.738375
26
/ 100
low-risk
Severity 21/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal