Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2026-4988— Open5GS CCA Message smf_s6b denial of service

CVSS 3.7 · Low EPSS 0.10% · P27
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-4988

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Open5GS CCA Message smf_s6b denial of service
Source: NVD (National Vulnerability Database)
Vulnerability Description
A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
不恰当的资源关闭或释放
Source: NVD (National Vulnerability Database)
Vulnerability Title
Open5GS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open5GS是Open5GS开源的一个 5G Core 和 Epc 的 C 语言开源实现，即 Lte/Nr 网络的核心网络。 Open5GS 2.7.6版本存在安全漏洞，该漏洞源于CCA消息处理程序函数存在缺陷，可能导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Open5GS 2.7.6 cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-4988

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-4988

请登录查看更多情报信息。

Same Patch Batch · n/a · 2026-03-27 · 27 CVEs total

CVE-2026-49907.3 HIGHchatwoot Signup Endpoint login improper authorization
CVE-2026-49627.0 HIGHUltraVNC Service version.dll uncontrolled search path
CVE-2025-699886.5 MEDIUMBS Producten Petcam 安全漏洞
CVE-2026-30530SourceCodester Online Food Ordering System 安全漏洞
CVE-2026-30567SourceCodester Inventory System 跨站脚本漏洞
CVE-2026-30568SourceCodester Inventory System 安全漏洞
CVE-2026-30575SourceCodester Pharmacy Product Management System 安全漏洞
CVE-2026-30571SourceCodester Inventory System 跨站脚本漏洞
CVE-2026-30570SourceCodester Inventory System 跨站脚本漏洞
CVE-2026-30569SourceCodester Inventory System 跨站脚本漏洞
CVE-2026-30574SourceCodester Pharmacy Product Management System 安全漏洞
CVE-2026-30576SourceCodester Pharmacy Product Management System 安全漏洞
CVE-2026-30527SourceCodester Online Food Ordering System 安全漏洞
CVE-2026-30529SourceCodester Online Food Ordering System 安全漏洞
CVE-2026-29871Awesome LLM Apps 安全漏洞
CVE-2026-30531SourceCodester Online Food Ordering System 安全漏洞
CVE-2026-30302GitLab CodeRider-Kilo 安全漏洞
CVE-2026-30533SourceCodester Online Food Ordering System 安全漏洞
CVE-2026-30534SourceCodester Online Food Ordering System 安全漏洞
CVE-2026-30532SourceCodester Online Food Ordering System 安全漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Open5GS
Same vendor: n/a
Same weakness: CWE-404

V. Comments for CVE-2026-4988

No comments yet

Leave a comment