CVE-2026-14618: Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-04 · updated 2026-07-06
Weakness: CWE-404

Description

A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_discover of the file src/amf/nnrf-handler.c of the component AMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as fb5f67703de0213fb9c6e6ef3b48b6c1707e9503. It is best practice to apply a patch to resolve this issue.

Affected products

Open5GS: 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5 (+2)

References

https://github.com/ferrancanellas/open5gs/commit/fb5f67703de0213fb9c6e6ef3b48b6c1707e9503
https://github.com/open5gs/open5gs/
https://github.com/open5gs/open5gs/issues/4517
https://github.com/open5gs/open5gs/issues/4517#issuecomment-4589606265
https://vuldb.com/cve/CVE-2026-14618
https://vuldb.com/submit/844824
https://vuldb.com/vuln/376135
https://vuldb.com/vuln/376135/cti

Get alerted when CVE-2026-14618 or the next vulnerability affects your stack