Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2026-1521

Good to know:

icon

Date: January 28, 2026

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_bearer_resource_failure_indication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The patch is named 69b53add90a9479d7960b822fc60601d659c328b. It is recommended to apply a patch to fix this issue.

Severity Score

Related Resources (9)

https://github.com/open5gs/open5gs/issues/4268
https://nvd.nist.gov/vuln/detail/CVE-2026-1521
https://vuldb.com/?id.343192
https://vuldb.com/?ctiid.343192
https://vuldb.com/?submit.738370
https://github.com/open5gs/open5gs/issues/4268#issue-3795012861
https://github.com/open5gs/open5gs/commit/69b53add90a9479d7960b822fc60601d659c328b
https://github.com/open5gs/open5gs/issues/4268#event-21989483261
https://www.mend.io/vulnerability-database/CVE-2026-1521

Severity Score

Weakness Type (CWE)

Improper Resource Shutdown or Release

CWE-404

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us