Is there a public PoC exploit available for EUVD-2026-26679?

Yes, a public proof-of-concept exploit is available for EUVD-2026-26679. Prioritise patching immediately. EPSS: 0.1%.

Open5GS EUVD-2026-26679

Q: What is the CVSS score of EUVD-2026-26679?

EUVD-2026-26679 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-7585 LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-01 VulDB

Denial Of Service Open5gs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

May 01, 2026 - 20:22 vuln.today

Public exploit code

Severity Changed

May 01, 2026 - 16:22 NVD

MEDIUM LOW

CVSS changed

May 01, 2026 - 16:22 NVD

4.3 (MEDIUM) 2.1 (LOW)

Analysis Generated

May 01, 2026 - 16:01 vuln.today

EUVD ID Assigned

May 01, 2026 - 15:45 euvd

EUVD-2026-26679

Analysis Generated

May 01, 2026 - 15:45 vuln.today

CVE Published

May 01, 2026 - 15:15 nvd

LOW 2.1

DescriptionCVE.org

A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service in Open5GS up to version 2.7.7 allows authenticated remote attackers to crash the AMF (Access and Mobility Management Function) component via manipulation of the amf_nudm_sdm_handle_provisioned function in the NUDM handler. The vulnerability has publicly available exploit code and affects the authentication and mobility management core of 5G networks, requiring valid credentials to trigger but resulting in service unavailability. Public disclosure has occurred without vendor remediation at the time of analysis.

Technical ContextAI

Open5GS is an open-source implementation of 5G core network functions. The vulnerability resides in the AMF (Access and Mobility Management Function) component, specifically in the NUDM (Unified Data Management) handler module at /src/amf/nudm-handler.c. The amf_nudm_sdm_handle_provisioned function processes provisioning data from the UDM during subscriber data management operations, which is a critical authentication and session management pathway in 5G networks. CWE-404 (Improper Resource Validation) indicates that the function fails to properly validate or handle certain resource requests, leading to uncontrolled resource consumption or incorrect state transitions that crash the process. The NUDM interface is part of the Service-Based Architecture (SBA) defined in 3GPP standards, making this a core signaling plane vulnerability.

RemediationAI

No vendor-released patch has been identified at time of analysis despite early notification to the Open5GS project. Users should monitor the official Open5GS GitHub repository (https://github.com/open5gs/open5gs/) for a patched release version that addresses the amf_nudm_sdm_handle_provisioned function vulnerability. As an interim compensating control, restrict NUDM interface access to explicitly trusted UDM components only, implementing network-level filtering on the SBa interface (typically port 80/443 with SCP enforcement) to limit which network elements can reach the AMF. Monitor AMF process stability and implement automated restart mechanisms to minimize service disruption from crashes. Isolate the 5G core network from untrusted network segments and implement strong mutual TLS (mTLS) authentication on all SBA interfaces to raise the bar for credential-based attacks. These controls reduce exploitability by raising authentication requirements beyond simple password compromise, though they do not eliminate the underlying code defect. Consider upgrading to newer Open5GS versions if available, or engaging with the Open5GS community for patch status via the GitHub issues tracker referenced in VulDB submission 804334.