CVE Tools
Track your stack

OPEN5GS

165 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for OPEN5GS, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

OPEN5GS CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
OPEN5GS CVEs per month
MonthCVEs
2024-112
2024-120
2025-0129
2025-021
2025-033
2025-041
2025-050
2025-066
2025-072
2025-089
2025-093
2025-102
2025-111
2025-125
2026-0114
2026-0210
2026-032
2026-040
2026-0545
2026-060
2026-071
2026-080
2026-090
2026-103

Severity

How the 165 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical32%
  • High4930%
  • Medium10161%
  • Low127%

Latest CVEs

The 15 most recently published vulnerabilities affecting OPEN5GS.

  1. CVE-2026-108105Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request5.9
  2. CVE-2026-108103Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE5.3
  3. CVE-2026-108102Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE5.3
  4. CVE-2026-15720Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler8.6
  5. CVE-2026-10157Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication7.3
  6. CVE-2026-10156Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption4.3
  7. CVE-2026-10117Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service4.3
  8. CVE-2026-10116Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of service4.3
  9. CVE-2026-10115Open5GS Shared NF-profile nnrf-handler.c denial of service4.3
  10. CVE-2026-10114Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write4.3
  11. CVE-2026-10113Open5GS Shared NF-profile nnrf-handler.c denial of service4.3
  12. CVE-2026-8746Open5GS NRF nghttp2-server.c discover_handler use after free4.3
  13. CVE-2026-8745Open5GS AUSF nausf-handler.c ogs_timer_add denial of service4.3
  14. CVE-2026-8744Open5GS NRF context.c ogs_sbi_nf_service_add denial of service4.3
  15. CVE-2026-8743Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization6.3

Product grouping is registry-driven, with AI assist and human review. How it works