CVE-2026-4988 - Vulnerability Analysis

Overview

Open5GS 2.7.6 contains a denial of service caused by manipulation in CCA Message Handler functions smf_gx_cca_cb, smf_gy_cca_cb, and smf_s6b, letting remote attackers cause service disruption, exploit requires complex attack conditions.

Severity & Score

Impact

Remote attackers can cause denial of service, disrupting availability of the affected system.

Mitigation

Update to the latest version of Open5GS.

References

• https://github.com/open5gs/open5gs/issues/4342#issue-4021772232
• https://vuldb.com/?ctiid.353875
• https://vuldb.com/?id.353875
• https://vuldb.com/?submit.771349
• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/issues/4342

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner