{"id":"CVE-2026-92417","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-92417","summary":"A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation…","details":"A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as 8f07b507b78ff94776f2cd49276eb116ed93d7f2. A patch should be applied to remediate this issue.","published":"2026-09-16T19:18:05.933","modified":"2026-09-16T19:18:06.110","cvss":{"score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/open5gs/open5gs/commit/8f07b507b78ff94776f2cd49276eb116ed93d7f2","label":"open5gs/open5gs@8f07b50"},"references":[{"type":"WEB","url":"https://github.com/open5gs/open5gs/"},{"type":"WEB","url":"https://github.com/open5gs/open5gs/commit/8f07b507b78ff94776f2cd49276eb116ed93d7f2"},{"type":"WEB","url":"https://github.com/open5gs/open5gs/issues/4745"},{"type":"WEB","url":"https://vuldb.com/cve/CVE-2026-92417"},{"type":"WEB","url":"https://vuldb.com/submit/940465"},{"type":"WEB","url":"https://vuldb.com/vuln/405595"},{"type":"WEB","url":"https://vuldb.com/vuln/405595/cti"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-09-16T19:18:06.110"}}