CVE-2026-10117

MediumCVSS 4.3/10Last modified Jul 22, 2026

Description

A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-server.c. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. It is best practice to apply a patch to resolve this issue.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-404

Affected software

No affected versions have been published.

Timeline

Published
May 30, 2026
Last modified
Jul 22, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1011704.0DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011713.6Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect CVE-2026-1011726.2Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.CVE-2026-1011736.5DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011745.7DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011754.3Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011767.1Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affeCVE-2026-1011773.7Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentCVE-2026-1011786.6Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service coCVE-2026-1011794.7Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-101187.8A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, whenCVE-2026-1011804.3DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-10117: Medium severity, CVSS 4.3 | Vulnix