CVE-2026-10157

Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication

State: Published
Severity: 6.9 Medium
Published: May 31, 2026
Updated: Oct 21, 2026
Reserved: May 30, 2026

Description

A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The identifier of the patch is a188e36b1741ffc2252133f59b1bda4f14d3cb5c. It is suggested to install a patch to address this issue.

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C	VulDB
3.0	7.3 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C	VulDB
2.0	7.5 High	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C	VulDB

Weaknesses

CWE-287 Improper Authentication

Affected Products

Product	Versions
Open5GSn/a	2.7.0Affected 2.7.1Affected 2.7.2Affected 2.7.3Affected 2.7.4Affected 2.7.5Affected 2.7.6Affected

References

VDB-367410 | Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authenticationvdb-entry
VDB-367410 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
CVE-2026-10157 | CVE Analysis and Reportthird-party-advisory
Submit #818939 | open5gs Open5GS v2.7.6 Improper Authenticationthird-party-advisory
https://github.com/open5gs/open5gs/issues/4393exploitissue-tracking
https://github.com/open5gs/open5gs/pull/4557issue-trackingpatch
https://github.com/open5gs/open5gs/commit/a188e36b1741ffc2252133f59b1bda4f14d3cb5cpatch
https://github.com/open5gs/open5gs/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.