Newplane Open5gs
3 CVEs affecting Newplane Open5gs. Latest disclosed: 2026-01-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-41068 | High | 7.5 | 2025-10-27 | Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. This is achieved b… |
CVE-2025-41067 | High | 7.5 | 2025-10-27 | Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request tha… |
CVE-2026-0622 | Medium | 6.5 | 2026-01-20 | Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset |