Medium severity4.3NVD Advisory· Published Aug 30, 2026· Updated Sep 1, 2026

CVE-2026-82588

Description

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable of addressing this issue. The name of the patch is abf8a836564b966b5141110fc25ed413c4f17522. Upgrading the affected component is advised.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Open5gs/Open5gsllm-fuzzy
Range: <2.8.0

Patches

Vulnerability mechanics

References

github.com/open5gs/open5gs/commit/abf8a836564b966b5141110fc25ed413c4f17522nvd
github.com/open5gs/open5gs/issues/4397nvd
github.com/open5gs/open5gs/releases/tag/v2.8.0nvd
vuldb.com/cve/CVE-2026-82588nvd
vuldb.com/submit/891891nvd
vuldb.com/vuln/397083nvd
vuldb.com/vuln/397083/ctinvd

News mentions

Open5GS: Four Medium-Severity Flaws in SMF and AMF Disclosed Together
Vypr Intelligence · Aug 30, 2026

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000