CVE-2026-10117Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-server.c. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. It is best practice to apply a patch to resolve this issue.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-404

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-30: 2Technical Details · 2026-05-30: 105-30
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-10117 A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-server.c. Executing a manipu… https://www.cve.org/CVERecord?id=CVE-2026-10117

    Post summary

    The post discloses a weakness in Open5GS affecting the ogs_pool_id_calloc function, but offers no PoC, exploit, or mitigation information.

    00000200
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-10117 Denial of Service in Open5GS up to 2.7.7 via ogs_pool_id_calloc https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10117

    Post summary

    The text references CVE-2026-10117 as a DoS flaw in Open5GS up to version 2.7.7, providing basic technical details but no PoC, exploit code, active usage, or mitigation information.

    0000059
    4.0K followersView on X

Explore more