CVE-2026-10113 - Open5GS Shared NF-profile nnrf-handler.c denial of service

Back Back to CVE browser

MEDIUM

Open5GS Shared NF-profile nnrf-handler.c denial of service

Published May 30, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.30%

Description

A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been made public and could be used. A patch should be applied to remediate this issue.

Affected products

Vendor Open5gs Product Open5GS Default
n/a
- Version
  2.7.0
  Status
  affected
  Constraints
  -
- Version
  2.7.1
  Status
  affected
  Constraints
  -
- Version
  2.7.2
  Status
  affected
  Constraints
  -
- Version
  2.7.3
  Status
  affected
  Constraints
  -
- Version
  2.7.4
  Status
  affected
  Constraints
  -
- Version
  2.7.5
  Status
  affected
  Constraints
  -
- Version
  2.7.6
  Status
  affected
  Constraints
  -
- Version
  2.7.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Open5gs

Open5GS

n/a

Version	Status	Constraints
2.7.0	affected	-
2.7.1	affected	-
2.7.2	affected	-
2.7.3	affected	-
2.7.4	affected	-
2.7.5	affected	-
2.7.6	affected	-
2.7.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (6)

https://github.com/open5gs/open5gs/
product
https://github.com/open5gs/open5gs/issues/4467
exploitissue-tracking
https://github.com/open5gs/open5gs/pull/4527
issue-trackingpatch
https://vuldb.com/submit/818581
third-party-advisory
https://vuldb.com/vuln/367291
vdb-entry
https://vuldb.com/vuln/367291/cti
signaturepermissions-required

Link	Providers	Tags
https://github.com/open5gs/open5gs/		product
https://github.com/open5gs/open5gs/issues/4467		exploitissue-tracking
https://github.com/open5gs/open5gs/pull/4527		issue-trackingpatch
https://vuldb.com/submit/818581		third-party-advisory
https://vuldb.com/vuln/367291		vdb-entry
https://vuldb.com/vuln/367291/cti		signaturepermissions-required