CVE-2026-82547
Received Received - Intake

Improper Authentication in Magma Registration Complete Message Handler

Publication date: 2026-08-30

Last updated on: 2026-08-30

Assigner: VulDB

Description
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and could be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-30
Last Modified
2026-08-30
Generated
2026-08-30
AI Q&A
2026-08-30
EPSS Evaluated
N/A
NVD
CVE-2026-82547
EUVD
EUVD-2026-68245

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_foundation magma 1.9.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82547 is an improper authentication vulnerability in Linux Foundation Magma 1.9.0. It affects the AMF component's Registration Complete Message Handler, allowing state transitions without proper security checks. This can lead to authentication bypass and potential denial of service due to MME crashes.

Detection Guidance

Monitor for unexpected state transitions in the AMF component from COMMON_PROCEDURE_INITIATED2 to REGISTERED_CONNECTED without proper authentication. Check for crashes in the MME (Mobility Management Entity) and inspect NGAP messages for improper Registration Complete messages sent before security mode establishment.

Impact Analysis

This vulnerability could allow remote attackers to bypass authentication, disrupt services via MME crashes, or manipulate state transitions in the Magma 5G network component. Exploitation may lead to unauthorized access or service outages.

Compliance Impact

This vulnerability allows improper authentication and bypasses security checks in the Magma project's AMF component, which could lead to unauthorized access or denial of service. Such flaws may violate compliance requirements under GDPR (data protection) and HIPAA (health data security) by failing to ensure proper authentication and data integrity controls.

Mitigation Strategies

Update Magma to a patched version beyond v1.9.0. Implement strict validation for NGAP messages, ensuring Registration Complete messages are only processed after proper security mode establishment. Monitor logs for MME crashes and unauthorized state changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82547. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart