Description
A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted DELETE request.
Published: 2026-08-27
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch
AI Analysis

Impact

A reachable assertion in the SM‑Context endpoint of Open5GS causes the application to terminate when a specially crafted DELETE request is received. The failure of the assertion leads to a crash, denying service to all users of the affected 5G session management component.

Affected Systems

Open5GS version 2.7.6 exposes the vulnerable component at /nsmf-pdusession/v1/sm-contexts. No other versions are reported as affected, so the flaw is limited to this specific release.

Risk and Exploitability

The CVSS score is 7.5, and the EPSS score is unavailable. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is network‑based via the HTTP API; an attacker who can reach the SM‑Context endpoint can trigger the flaw by sending a crafted DELETE command, resulting in a local denial of service to the targeted Open5GS deployment.

Generated by OpenCVE AI on August 28, 2026 at 07:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to the latest Open5GS release that contains the fixed SM‑Context code.
  • Configure firewall or API gateway rules to block or rate‑limit DELETE requests to /nsmf-pdusession/v1/sm-contexts until a patch is applied.
  • Verify that the SM‑Context component is not exposed to untrusted networks or unprivileged users.

Generated by OpenCVE AI on August 28, 2026 at 07:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 07:45:00 +0000

Type Values Removed Values Added
Title Reachable Assertion Leading to DoS in Open5GS SM Session Context Component

Thu, 27 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Title Reachable Assertion Leading to DoS in Open5GS SM Session Context Component
First Time appeared Open5gs
Open5gs open5gs
Weaknesses CWE-617
Vendors & Products Open5gs
Open5gs open5gs
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Thu, 27 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
Description A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted DELETE request.
References

Subscriptions

Open5gs Open5gs
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-27T18:43:53.949Z

Reserved: 2026-03-04T00:00:00.000Z

Link: CVE-2026-30047

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-08-27T17:17:50.417

Modified: 2026-08-31T20:12:02.273

Link: CVE-2026-30047

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T07:30:07Z

Weaknesses