CVE-2026-1521: Open5GS SGWC s5c-handler.c denial of service
A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwcs5chandlebearerresourcefailureindication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The patch is named 69b53add90a9479d7960b822fc60601d659c328b. It is recommended to apply a patch to fix this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1521?
CVE-2026-1521 is classified as a denial of service vulnerability affecting Open5GS versions up to 2.7.6.
How do I fix CVE-2026-1521?
To mitigate CVE-2026-1521, update Open5GS to version 2.7.7 or later where the vulnerability has been addressed.
What components are affected by CVE-2026-1521?
CVE-2026-1521 specifically affects the SGWC component in the s5c-handler.c file.
What type of attack does CVE-2026-1521 facilitate?
CVE-2026-1521 facilitates a denial of service attack through manipulation of specific functions within Open5GS.
How widespread is CVE-2026-1521?
CVE-2026-1521 impacts all users of Open5GS versions up to 2.7.6, making it critical for affected users to upgrade.