CVE-2026-7585: Open5GS AMF nudm-handler.c amf_nudm_sdm_handle_provisioned denial of service
A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amfnudmsdmhandleprovisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7585?
CVE-2026-7585 has been identified as a denial of service vulnerability.
How do I fix CVE-2026-7585?
To mitigate CVE-2026-7585, upgrade Open5GS to version 2.7.8 or later.
What component of Open5GS is affected by CVE-2026-7585?
The affected component in Open5GS is the AMF module, specifically the function amf_nudm_sdm_handle_provisioned.
What versions of Open5GS are vulnerable to CVE-2026-7585?
Open5GS versions up to and including 2.7.7 are vulnerable to CVE-2026-7585.
Can CVE-2026-7585 be exploited remotely?
Yes, CVE-2026-7585 can be exploited remotely, leading to a denial of service condition.