Open5gs is a widely adopted open-source implementation of 5G core network functions that has become a key reference platform for mobile infrastructure research, testing, and emerging deployments. Despite its narrow product scope, the platform occupies a prominent position in the 5G ecosystem, and its vulnerabilities concentrate in resource-management and boundary-handling classes including improper resource shutdown, reachable assertions, uncontrolled resource consumption, and memory buffer boundary violations. These weakness patterns reflect the demands of networked signaling protocols and packet-processing logic where incomplete cleanup, unsafe state validation, and unbounded allocation can trigger service disruption or instability. Defenders deploying or evaluating 5G core infrastructure should monitor this vendor's security advisories and treat patches as material to network reliability and resilience; live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Open5gs over time
Signals from CVEs in this vendor scope (155 CVEs).
155 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-2521CRITICAL A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can | Feb 15, 2026 | 9.8 | 36 | NO | NO |
CVE-2026-2522CRITICAL A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the component MME. The manipulation leads to | Feb 16, 2026 | 9.8 | 35 | NO | NO |
CVE-2026-15720HIGH In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service. | Jul 14, 2026 | 8.6 | 33 | NO | NO |
CVE-2026-8187HIGH A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to r | May 9, 2026 | 7.5 | 30 | NO | NO |
CVE-2021-28122CRITICAL A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1. The WebUI component allows an unauthenticated user to use a crafted HTTP API request to creat | Mar 10, 2021 | 9.8 | 30 | NO | NO |
CVE-2026-8266MEDIUM A vulnerability was detected in Open5GS up to 2.7.7. This affects the function gsm_build_pdu_session_establishment_accept of the file /src/smf/gsm-build.c of the component SMF. The | May 11, 2026 | 6.5 | 29 | NO | NO |
CVE-2026-8226HIGH A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The mani | May 10, 2026 | 7.5 | 29 | NO | NO |
CVE-2026-8225HIGH A vulnerability was identified in Open5GS up to 2.7.7. This affects the function pcf_npcf_smpolicycontrol_handle_delete of the file src/pcf/sm-sm.c of the component delete Endpoint | May 10, 2026 | 7.5 | 29 | NO | NO |
CVE-2026-8224HIGH A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function pcf_sess_set_ipv6prefix of the file /src/pcf/context.c of the component PCF. Executing | May 10, 2026 | 7.5 | 29 | NO | NO |
CVE-2026-8268MEDIUM A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function OpenAPI_list_create of the component SMF. Such manipulation leads to denial of service. The a | May 11, 2026 | 6.5 | 28 | NO | NO |
Signals from CVEs in this vendor scope (155 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Open5gs.
Media articles that mention a CVE ID that affects a product developed by Open5gs — matched by CVE ID, not by vendor name.