CVE-2026-1738: OPEN5GS

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A flaw has been found in Open5GS up to 2.7.6. The impacted element is the function sgwc_tunnel_add of the file /src/sgwc/context.c of the component SGWC. Executing a manipulation of the argument pdr can lead to reachable assertion. The attack can be executed remotely. The exploit has been published and may be used. It is advisable to implement a patch to correct this issue. The issue report is flagged as already-fixed.

Affected products

• OPEN5GS OPEN5GS: up to and including 2.7.6

Published 2026-02-02. Last modified 2026-06-17.