CVE-2026-10116 - Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of service

Back Back to CVE browser

MEDIUM

Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of service

Published May 30, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.39%

Description

A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_sbi_xact_add in the library /lib/core/ogs-timer.c of the component ue-authentications Endpoint. Performing a manipulation results in denial of service. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. Applying a patch is the recommended action to fix this issue.

Affected products

Vendor Open5gs Product Open5GS Default
n/a
- Version
  2.7.0
  Status
  affected
  Constraints
  -
- Version
  2.7.1
  Status
  affected
  Constraints
  -
- Version
  2.7.2
  Status
  affected
  Constraints
  -
- Version
  2.7.3
  Status
  affected
  Constraints
  -
- Version
  2.7.4
  Status
  affected
  Constraints
  -
- Version
  2.7.5
  Status
  affected
  Constraints
  -
- Version
  2.7.6
  Status
  affected
  Constraints
  -
- Version
  2.7.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Open5gs

Open5GS

n/a

Version	Status	Constraints
2.7.0	affected	-
2.7.1	affected	-
2.7.2	affected	-
2.7.3	affected	-
2.7.4	affected	-
2.7.5	affected	-
2.7.6	affected	-
2.7.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (6)

https://github.com/open5gs/open5gs/
product
https://github.com/open5gs/open5gs/issues/4473
exploitissue-tracking
https://github.com/open5gs/open5gs/pull/4578
issue-trackingpatch
https://vuldb.com/submit/818585
third-party-advisory
https://vuldb.com/vuln/367294
vdb-entrytechnical-description
https://vuldb.com/vuln/367294/cti
signaturepermissions-required

Link	Providers	Tags
https://github.com/open5gs/open5gs/		product
https://github.com/open5gs/open5gs/issues/4473		exploitissue-tracking
https://github.com/open5gs/open5gs/pull/4578		issue-trackingpatch
https://vuldb.com/submit/818585		third-party-advisory
https://vuldb.com/vuln/367294		vdb-entrytechnical-description
https://vuldb.com/vuln/367294/cti		signaturepermissions-required