CVE-2026-1737: Open5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertion

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-02-02 · updated 2026-06-17
Weakness: CWE-617

Description

A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function sgwc_s5c_handle_create_bearer_request of the file /src/sgwc/s5c-handler.c of the component CreateBearerRequest Handler. Performing a manipulation results in reachable assertion. Remote exploitation of the attack is possible. The exploit is now public and may be used. To fix this issue, it is recommended to deploy a patch. The issue report is flagged as already-fixed.

Affected products

Open5GS: through 2.7.6

References

https://github.com/open5gs/open5gs/
https://github.com/open5gs/open5gs/issues/4271
https://github.com/open5gs/open5gs/issues/4271#event-21968630023
https://github.com/open5gs/open5gs/issues/4271#issue-3795147720
https://vuldb.com/?ctiid.343636
https://vuldb.com/?id.343636
https://vuldb.com/?submit.741192

Get alerted when CVE-2026-1737 or the next vulnerability affects your stack