OPEN5GS
113 CVEs tracked since 2022. Since Sep 2022, none of them reached CISA KEV.
OPEN5GS CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-09 | 4 | 0 |
| 2022-10 | 2 or fewer | |
| 2022-11 | 3 | 0 |
| 2022-12 | 3 or fewer | |
| 2023-01 | 3 or fewer | |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 3 or fewer | |
| 2023-06 | 4 or fewer | |
| 2023-07 | 3 or fewer | |
| 2023-08 | 4 or fewer | |
| 2023-09 | 3 or fewer | |
| 2023-10 | 4 or fewer | |
| 2023-11 | 4 or fewer | |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 4 or fewer | |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 29 | 0 |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 6 | 0 |
| 2025-07 | 5 or fewer | |
| 2025-08 | 9 | 0 |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 14 | 0 |
| 2026-02 | 10 | 0 |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 38 | 0 |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in OPEN5GS's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting OPEN5GS.
- CVE-2026-108105Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request5.9
- CVE-2026-108103Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE5.3
- CVE-2026-108102Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE5.3
- CVE-2026-15720Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler8.6
- CVE-2026-8746Open5GS NRF nghttp2-server.c discover_handler use after free4.3
- CVE-2026-8745Open5GS AUSF nausf-handler.c ogs_timer_add denial of service4.3
- CVE-2026-8744Open5GS NRF context.c ogs_sbi_nf_service_add denial of service4.3
- CVE-2026-8743Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization6.3
- CVE-2026-8731Open5GS NRF client.c ogs_sbi_client_add denial of service4.3
- CVE-2026-8730Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service4.3
- CVE-2026-8729Open5GS NRF message.c denial of service4.3
- CVE-2026-8728Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of service4.3
- CVE-2026-8292Open5GS NRF conv.c yuarel_parse denial of service4.3
- CVE-2026-8291Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service4.3
- CVE-2026-8290Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service4.3
The record
- Peak rank
- #30 in May 2026
- Busiest month shown
- May 2026, 38 CVEs
- Months with a KEV entry
- 0 since Sep 2022
- Monthly snapshots
- 8 since 2022