PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-10156 Open5GS CVE debrief

A low-severity resource consumption vulnerability exists in Open5GS up to version 2.7.7, specifically within the handle_amf_info function in /lib/sbi/nnrf-handler.c. The nf-instances endpoint is affected by manipulation of the nf_info_pool argument, which can be exploited remotely to cause resource exhaustion. The issue has been publicly disclosed with a published exploit, though the report is flagged as already-fixed. The CVSS 4.0 vector indicates network attack vector with low attack complexity, requiring low privileges and no user interaction, resulting in low availability impact. CWE-400 (Uncontrolled Resource Consumption) and CWE-404 (Improper Resource Shutdown or Release) are identified as relevant weakness classifications.

Vendor
Open5GS
Product
Open5GS
CVSS
LOW 2.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-31
Original CVE updated
2026-07-22
Advisory published
2026-05-31
Advisory updated
2026-07-22

Who should care

Organizations operating Open5GS-based 5G core networks, particularly those exposing SBI interfaces to broader networks or multi-tenant environments where low-privileged access may be available to potential attackers.

Technical summary

The vulnerability resides in the handle_amf_info function within /lib/sbi/nnrf-handler.c of Open5GS versions up to 2.7.7. The nf-instances endpoint accepts manipulated nf_info_pool arguments that can trigger uncontrolled resource consumption. Remote attackers with low privileges can exploit this without user interaction, causing availability degradation. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VA:L) reflects network accessibility, low complexity, and low availability impact. The issue is classified under CWE-400 and CWE-404, indicating both uncontrolled resource consumption and improper resource shutdown weaknesses.

Defensive priority

low

Recommended defensive actions

  • Upgrade Open5GS to a version beyond 2.7.7 or apply available patches addressing the nf_info_pool resource consumption issue in /lib/sbi/nnrf-handler.c
  • Monitor nf-instances endpoint for anomalous resource consumption patterns that may indicate exploitation attempts
  • Review and implement rate limiting or input validation controls for SBI interface requests to the NRF handler
  • Verify fix status through vendor channels given the issue is flagged as already-fixed
  • Assess exposure of Open5GS SBI interfaces to untrusted networks and restrict access where possible

Evidence notes

Vulnerability affects Open5GS handle_amf_info function in nf-instances endpoint; remote exploitation possible via nf_info_pool manipulation. Issue report flagged as already-fixed. CVSS 4.0 score 2.1 (LOW).

Sources and references

Verified primary and authoritative sources

  • CVE-2026-10156 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-10156

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-10156 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-10156

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.