CVE-2026-14618 PUBLISHED

Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service

Assigner: VulDB
Reserved: 03.07.2026 Published: 04.07.2026 Updated: 04.07.2026

A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_discover of the file src/amf/nnrf-handler.c of the component AMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as fb5f67703de0213fb9c6e6ef3b48b6c1707e9503. It is best practice to apply a patch to resolve this issue.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Product Status

Vendor n/a
Product Open5GS
Versions
  • Version 2.7.0 is affected
  • Version 2.7.1 is affected
  • Version 2.7.2 is affected
  • Version 2.7.3 is affected
  • Version 2.7.4 is affected
  • Version 2.7.5 is affected
  • Version 2.7.6 is affected
  • Version 2.7.7 is affected

Credits

  • insengen (VulDB User) reporter

References

Problem Types

  • Denial of Service CWE