CVE-2026-7781: Open5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of service
A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the function udmnudmuecmhandleamfregistrationupdate of the file /src/udm/nudm-handler.c of the component amf-3gpp-access Endpoint. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply a network-level mitigation to reduce or block remote access to the Open5GS amf-3gpp-access Endpoint that contains /src/udm/nudm-handler.c (function udm_nudm_uecm_handle_amf_registration_update), e.g., restrict inbound connectivity to trusted sources at the firewall/ACL.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7781?
CVE-2026-7781 has a severity rating of high due to its potential to cause a denial of service.
How do I fix CVE-2026-7781?
To fix CVE-2026-7781, upgrade your Open5GS amf-3gpp-access Endpoint to version 2.7.8 or later.
What versions of Open5GS are affected by CVE-2026-7781?
CVE-2026-7781 affects Open5GS up to version 2.7.7.
What specific component is vulnerable in CVE-2026-7781?
The vulnerable component in CVE-2026-7781 is the function udm_nudm_uecm_handle_amf_registration_update within the nudm-handler.c file.
Is CVE-2026-7781 related to any specific functionality in Open5GS?
Yes, CVE-2026-7781 is specifically related to the amf registration update functionality in Open5GS.