{"id":"CVE-2026-82590","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-82590","generatedAt":"2026-10-28T03:38:52.383Z","title":"A weakness has been identified in Open5GS up to 2.7.7.","description":"A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely. Upgrading to version 2.8.0 is sufficient to fix this issue. This patch is called 4554405f29bffd7562abedbee63484825bd90cd5. You should upgrade the affected component.","published":"2026-08-30T23:17:08.000Z","lastModified":"2026-08-31T22:17:26.000Z","status":"Deferred","sourceIdentifier":"cna@vuldb.com","cvss":{"version":"4.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-617"],"affected":[],"epss":{"score":0.00545,"percentile":0.45531,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.55%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/open5gs/open5gs/","source":"cna@vuldb.com"},{"url":"https://github.com/open5gs/open5gs/commit/4554405f29bffd7562abedbee63484825bd90cd5","source":"cna@vuldb.com"},{"url":"https://github.com/open5gs/open5gs/issues/4455","source":"cna@vuldb.com"},{"url":"https://github.com/open5gs/open5gs/releases/tag/v2.8.0","source":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-82590","source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/891893","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/397085","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/397085/cti","source":"cna@vuldb.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-82590","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}