CVE-2026-4988

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404

Affected software

Vendor	Product	Versions
n/a	Open5GS	2.7.6

References

https://github.com/open5gs/open5gs/Product
https://github.com/open5gs/open5gs/issues/4342Exploit, Issue Tracking
https://github.com/open5gs/open5gs/issues/4342#issue-4021772232Issue Tracking
https://vuldb.com/?ctiid.353875Permissions Required, VDB Entry
https://vuldb.com/?id.353875Third Party Advisory, VDB Entry
https://vuldb.com/?submit.771349Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 27, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-498807.8In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local e CVE-2026-498817.8In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could le CVE-2026-498828.8In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code CVE-2026-498835.5In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permissio CVE-2026-498847.8In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es CVE-2026-498857.8In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation CVE-2026-498877.8In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. CVE-2026-49894.3Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform se CVE-2026-498953.5In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This cou CVE-2026-49907.3A security vulnerability has been detected in chatwoot up to 4.11.1. The affected element is an unknown function of the file /app/login of t CVE-2026-49913.5A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /adm CVE-2026-499187.8In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege