CVE-2026-4240CWE-404

Open5GS CCA smf_s6b_sta_cb denial of service

Medium · published March 16, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b_aaa_cb/smf_s6b_sta_cb of the component CCA Handler. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.7.7 is sufficient to fix this issue. Patch name: 80eb484a6ab32968e755e628b70d1a9c64f012ec. Upgrading the affected component is recommended.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00923 · 60.0th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2026-03-16T13:32Z
EPSS history
Timeline
  • 16 MAR 13:32Z
    Open5GS CCA smf_s6b_sta_cb denial of service
    cvelistv5