CVE-2026-37198 Open5GS CVE debrief

Who should care

Defenders responsible for Open5GS deployments should assess exposure and potential impact, as the vulnerability could lead to service disruption. The vulnerability has a CVSS score of 7.5 and is considered high severity. Open5GS is an open-source 5G core network software, and its SMF component is affected. Defenders should prioritize verifying exposure and assessing potential impact, as the vulnerability is in a widely used component and could lead to and

Why it matters

CVE-2026-37198 is a high-severity vulnerability in Open5GS v2.7.6 that allows attackers to cause a Denial of Service (DoS) via a crafted GTP packet. Defenders should prioritize verifying exposure and assessing potential impact, as the vulnerability is in a widely used component and could lead to service disruption.

• Service disruption due to Denial of Service
• Potential impact on network availability
• Need for verification of system versions and configurations

Technical summary

The vulnerability is caused by an integer overflow in the SMF component of Open5GS v2.7.6. An attacker can cause a Denial of Service (DoS) by supplying a crafted GTP packet. The vulnerability has a CVSS score of 7.5 and is considered high severity. The SMF component is part of the Open5GS 5G core network software. The vulnerability could lead to service disruption, impacting network availability. Defenders should prioritize verifying exposure and assessing potential impact, as the vulnerability is in a widely used component.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, as the vulnerability is in a widely used component and could lead to service disruption.

Recommended defensive actions

• Verify exposure by checking system versions and configurations
• Assess potential impact on services and networks
• Monitor for potential exploitation attempts
• Consider implementing compensating controls to mitigate potential impact
• Review vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability is caused by an integer overflow in the SMF component of Open5GS. The CVE record and NVD entry provide details on the vulnerability, but additional information from vendor sources is limited. Defenders should verify system versions and configurations to assess exposure. The vulnerability has a CVSS score of 7.5 and is considered high severity. There are no known exploits in the wild, but defenders should monitor for potential exploitation attempts. The Open5GS project has released a patch to address the vulnerability

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.