CVE-2026-1736: OPEN5GS

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request of the file /src/sgwc/s11-handler.c of the component SGWC. Such manipulation leads to reachable assertion. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. A patch should be applied to remediate this issue. The issue report is flagged as already-fixed.

Affected products

• OPEN5GS OPEN5GS: up to and including 2.7.6

Published 2026-02-02. Last modified 2026-06-17.