VulnSocial

CVE-2026-2517Disclosure(open5gs / open5gs)

LOWCVSS 7.5 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Patch open5gs open5gs systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

open5gs CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-404

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • open5gs

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 4 total mentions across 1 day

Affected systems

Vendors
open5gs
Products
open5gs

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-02-15: 4Patch / Workaround · 2026-02-15: 1Technical Details · 2026-02-15: 202-15
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets4 URLs
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-2517 A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the componen… https://www.cve.org/CVERecord?id=CVE-2026-2517

    Post summary

    A new vulnerability, CVE-2026-2517, in Open5GS (up to 2.7.6) affecting the ogs_gtp2_parse_tft function was disclosed, with details linked to the official CVE record, but no PoC, exploit, or patch information is provided.

    00011240
    56.4K followersView on X
  • VulDB 🛡@vuldb
    General

    Attention, elevated activities detected targeting Open5GS (CVE-2026-2517) https://vuldb.com/?ctiid.346108

    Post summary

    The notice alerts to detected elevated activity targeting Open5GS CVE-2026-2517, but no PoC, exploitation evidence, patch information, or detailed vulnerability description is provided.

    0000078
    2.1K followersView on X
  • OffSeq | Adversary Tactics for Cyber Resilience@offseq
    Patch

    🚨 Open5GS SMF hit by MEDIUM severity DoS flaw (CVE-2026-2517). Exploit is public — remote attackers can crash 5G core services in versions 2.7.0 – 2.7.6. Patch ASAP & block malformed GTPv2 traffic! https://radar.offseq.com/threat/cve-2026-2517-denial-of-service-in-open5gs-0831... https://t.co/1TgYvOJdmA

    Post summary

    The tweet highlights a medium‑severity DoS flaw (CVE‑2026‑2517) in Open5GS SMF, states the exploit is publicly available, and urges immediate patching and blocking of malformed GTPv2 traffic.

    0000044
    265 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-2517 Open5GS SMF Denial of Service Vulnerability in Packet Filtering Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2517

    Post summary

    The brief entry announces CVE-2026-2517, a DoS flaw in Open5GS SMF’s packet filtering, without providing exploit details, PoC, or patch information.

    0000036
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopen5gsopen5gs---

Explore more

Back to dashboardopen5gs CVEsopen5gs vulnerabilities