Medium 5.3Published Jan 28, 2026

CVE-2026-1521Open5GS SGWC s5c-handler.c denial of service

Updated under an hour ago (Oct 28, 2026, 7:00 PM ET)

Does this affect you?

It affects n/a Open5GS. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for n/a Open5GS

Exploited in the last 30 days

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_bearer_resource_failure_indication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The patch is named 69b53add90a9479d7960b822fc60601d659c328b. It is recommended to apply a patch to fix this issue.

CVSS: 5.3 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
Weakness (CWE): CWE-404
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulDB
NVD analysis: Modified
Record last updated: Feb 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

n/a Open5GS open5gs:open5gs	2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; 2.7.6	CNA record
open5gs open5gs open5gs:open5gs	through 2.7.6	NVD

References

References

https://vuldb.com/?id.343192	vdb-entry, technical-description, third-party-advisory
https://vuldb.com/?ctiid.343192	signature, permissions-required, vdb-entry
https://vuldb.com/?submit.738370	third-party-advisory, exploit, vdb-entry
https://github.com/open5gs/open5gs/issues/4268	issue-tracking, exploit, vendor-advisory
https://github.com/open5gs/open5gs/issues/4268#event-21989483261	issue-tracking, exploit, vendor-advisory
https://github.com/open5gs/open5gs/issues/4268#issue-3795012861	exploit, issue-tracking, vendor-advisory
https://github.com/open5gs/open5gs/commit/69b53add90a9479d7960b822fc60601d659c328b	patch
https://github.com/open5gs/open5gs/	product

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.