PT-2026-79822 · Open5Gs · Open5Gs

·

CVE-2026-78186

·

Published

2026-08-24

·

Updated

2026-08-24

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1
Description A flaw in the HSS component within the file src/hss/hss-cx-path.c allows a remote attacker to cause a reachable assertion. This occurs through the manipulation of the User-Name argument.
Recommendations Apply patch c9abe09421eb99bbf1cd7862a3d375e58a4eb9e4 to resolve the issue.

Exploit

Fix

Assertion Failure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-78186

Affected Products

Open5Gs