CVE-2026-10156 – Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption

CVE ID :CVE-2026-10156

Published : May 31, 2026, 12:16 a.m. | 16 minutes ago

Description :A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. Executing a manipulation of the argument nf_info_pool can lead to resource consumption. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The issue report is flagged as already-fixed.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…