CVE-2026-30047 Open5GS CVE debrief

Who should care

Open5GS v2.7.6 users and administrators should assess and mitigate this vulnerability to prevent potential Denial of Service (DoS) attacks. Operators of affected systems must prioritize verification of their deployments and consider compensating controls until official patches are available. Security teams should monitor for potential exploitation attempts and review system logs for suspicious activity related to the /nsmf-pdusession/v1/sm-contexts component. Vulnerability management processes should include verifying vendor remediation and applying patches or updates as available. Platform and infrastructure security teams may need to implement additional monitoring or protective measures for exposed systems. This vulnerability's potential impact on service availability requires immediate attention from operators and security teams responsible for Open5GS deployments.

Technical summary

The /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 is vulnerable to a reachable assertion vulnerability. An attacker can cause a Denial of Service (DoS) by supplying a crafted DELETE request. This vulnerability affects service availability and requires verification of Open5GS v2.7.6 deployments for exposure to the /nsmf-pdusession/v1/sm-contexts component.

Defensive priority

High-priority defensive actions are required to address this vulnerability.

Recommended defensive actions

• Inventory and assess Open5GS v2.7.6 deployments for exposure to the /nsmf-pdusession/v1/sm-contexts component.
• Implement compensating controls, such as rate limiting or IP blocking, to mitigate potential attacks.
• Monitor for and respond to potential Denial of Service (DoS) attacks targeting the /nsmf-pdusession/v1/sm-contexts component.
• Verify vendor remediation and apply patches or updates as available.
• Exception tracking and retest procedures should be established.

Evidence notes

Evidence is limited; verify Open5GS v2.7.6 /nsmf-pdusession/v1/sm-contexts component configurations and assess exposure to crafted DELETE requests. Limited source detail suggests validating configurations defensively and tracking vendor advisories for updates.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.