CVE-2026-92416
Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertion
- State
- Published
- Severity
- 5.3 Medium
- Published
- Sep 16, 2026
- Updated
- Sep 17, 2026
- Reserved
- Sep 16, 2026
Description
A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smf_n4_handle_session_report_request of the file src/smf/n4-handler.c of the component PFCP Session Report Request Handler. The manipulation leads to reachable assertion. The attack may be initiated remotely. The identifier of the patch is e5f0c06d0f2d9613b003daa1cfa3ba8a4bd157e9. It is suggested to install a patch to address this issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C | VulDB |
| 2.0 | 4.0 Medium | AV:N/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C | VulDB |
Weaknesses
- CWE-617 Reachable Assertion
Affected Products
| Product | Versions |
|---|---|
Open5GSn/a |
|
References
- VDB-405594 | Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertionvdb-entrytechnical-description
- VDB-405594 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-92416 | CVE Analysis and Reportthird-party-advisory
- Submit #940464 | Open5GS <=2.8.0 Denial of Servicethird-party-advisory
- https://github.com/open5gs/open5gs/issues/4744issue-tracking
- https://github.com/open5gs/open5gs/commit/e5f0c06d0f2d9613b003daa1cfa3ba8a4bd157e9patch
- https://github.com/open5gs/open5gs/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.