SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-71675

HIGH · CVSS 7.5 EPSS 0.39% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Open5GS version 2.7.0 contains a vulnerability in the ngap_send_to_nas() function, which can be exploited by remote attackers to trigger a denial of service. This issue could disrupt the availability of services relying on Open5GS, making it critical for organizations using this version to prioritize patching or mitigating the risk. Network operators and service providers utilizing Open5GS should take immediate action to address this vulnerability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-71675
Severity
HIGH
CVSS
7.5
EPSS
0.39%

Original NVD Description

An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in src/amf/ngap-path.c