CVE-2026-7707
Medium · 4.3CVSS
4.3
EPSS
0.4%
Published
May 3, 2026
CISA due date
—
The record
A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the argument pei results in denial of service. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118276 A vulnerability was determined in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118275 A vulnerability was found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118274 A vulnerability has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118273 A flaw has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118271 A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-117505 A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. CWE-404
- CVE-2026-117506 A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. CWE-404
- CVE-2026-117504 A vulnerability was identified in a2aproject a2a-go up to 2.4.0. CWE-404