CVE-2026-7587
Received Received - Intake
Denial of Service in Open5GS

Publication date: 2026-05-01

Last updated on: 2026-05-07

Assigner: VulDB

Description
A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handle_update_sm_context of the file /src/amf/nsmf-handler.c of the component AMF. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-01
Last Modified
2026-05-07
Generated
2026-06-19
AI Q&A
2026-05-01
EPSS Evaluated
2026-06-18
NVD
CVE-2026-7587
EUVD
EUVD-2026-26699
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
open5gs open5gs to 2.7.7 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in Open5GS up to version 2.7.7, specifically in the function amf_nsmf_pdusession_handle_update_sm_context within the AMF component. It allows an attacker to remotely manipulate this function, which leads to a denial of service condition.

Impact Analysis

The vulnerability can be exploited remotely to cause a denial of service, potentially disrupting the availability of the affected Open5GS service.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Detection Guidance

This vulnerability can be detected by monitoring the behavior of the Open5GS AMF component, specifically looking for crashes or assertion failures in the amf_nsmf_pdusession_handle_update_sm_context() function.

Detection involves checking for abnormal termination of the AMF process or logs indicating assertion failures related to invalid AMF transaction states when processing SMF /modify responses containing n2SmInfoType=PDU_RES_SETUP_REQ.

You can use system commands to monitor the Open5GS AMF process status and logs, for example:

  • Use journalctl or systemctl to check for AMF crashes: `journalctl -u open5gs-amf -f` or `systemctl status open5gs-amf`
  • Check Open5GS log files for assertion failures or crash messages related to nsmf-handler.c around lines 364-365.
  • Use network packet capture tools like tcpdump or Wireshark to monitor and analyze the SMF /modify responses containing n2SmInfoType=PDU_RES_SETUP_REQ to identify malformed or unexpected messages triggering the crash.
Mitigation Strategies

Immediate mitigation steps include restricting or validating the SMF peers that can send /modify responses to the AMF to prevent untrusted or malformed messages from triggering the vulnerability.

Since the vulnerability causes a denial of service via a crash, monitoring and restarting the AMF process automatically can reduce downtime.

Additionally, applying any available patches or updates from the Open5GS project once they are released is critical, although as of now the project has not responded to the issue report.

In the meantime, consider implementing network-level controls such as firewall rules or access control lists to limit communication to trusted SMF nodes only.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-7587. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart