CVE-2026-82590CWE-617

CVE-2026-82590

Medium · published August 31, 2026

CVSS v3.1
4.3
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely. Upgrading to version 2.8.0 is sufficient to fix this issue. This patch is called 4554405f29bffd7562abedbee63484825bd90cd5. You should upgrade the affected component.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
5.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X
EPSS
0.00545 · 44.9th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-08-31T03:17Z
References (8)
https://github.com/open5gs/open5gs/ · [email protected]https://github.com/open5gs/open5gs/commit/4554405f29bffd7562abedbee63484825bd90cd5 · [email protected]https://github.com/open5gs/open5gs/issues/4455 · [email protected]https://github.com/open5gs/open5gs/releases/tag/v2.8.0 · [email protected]https://vuldb.com/cve/CVE-2026-82590 · [email protected]https://vuldb.com/submit/891893 · [email protected]https://vuldb.com/vuln/397085 · [email protected]https://vuldb.com/vuln/397085/cti · [email protected]
EPSS history
Timeline
  • 01 SEP 03:32Z
    EPSS moved — → 0%
    epss
  • 30 AUG 22:30Z
    Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion
    cvelistv5