CVE-2026-10117CWE-404

Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service

Medium · published May 30, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-server.c. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. It is best practice to apply a patch to resolve this issue.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2026-05-30T12:30Z
EPSS history
Timeline
  • 30 MAY 12:30Z
    Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service
    cvelistv5