Vulnerability in Open5gs
CVE-2026-91855
A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality of the file lib/pfcp/handler.c of the component PFCP Message Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The patch is named 028e1dbb5e3271035ccee906ef417a97fc523f71. Applying a patch is the recommended action to fix this issue. CVE-2025-29339 describes a different assertion failure vulnerability in Open5GS UPF.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
EPSS exploit prediction
EPSS: 0.007 (54.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 54th percentile — 54.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: 0.000
Affected products
- Open5gs — versions 2.7.0, 2.7.1, 2.7.2
Weakness classification (CWE)
References
- vuldb.com/vuln/404086 (vdb-entry)
- vuldb.com/vuln/404086/cti (signature, permissions-required)
- vuldb.com/cve/CVE-2026-91855 (third-party-advisory)
- vuldb.com/submit/933834 (third-party-advisory)
- github.com/open5gs/open5gs/issues/4699 (issue-tracking, exploit)
- github.com/open5gs/open5gs/commit/028e1dbb5e3271035ccee906ef417a97fc523f71 (patch)
- github.com/open5gs/open5gs/ (product)
Frequently asked questions
- What is CVE-2026-91855?
- CVE-2026-91855 is a medium-severity vulnerability in Open5gs, classified under Improper Resource Shutdown or Release. CVSS score: 5.3/10. Published 2026-09-15.
- How severe is CVE-2026-91855?
- Medium severity. CVSS v3 base score is 5.3 out of 10.