CVE-2026-14618: Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service
A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amfnnrfhandlenfdiscover of the file src/amf/nnrf-handler.c of the component AMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as fb5f67703de0213fb9c6e6ef3b48b6c1707e9503. It is best practice to apply a patch to resolve this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open5GS AMF (amf_nnrf_handle_nf_discover)to a version that resolves this vulnerability.Patch fb5f67703de0213fb9c6e6ef3b48b6c1707e9503
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14618?
The severity of CVE-2026-14618 is classified as medium with a score of 4.3.
What does CVE-2026-14618 affect?
CVE-2026-14618 affects the function amf_nnrf_handle_nf_discover in the Open5GS AMF component.
What type of attack is associated with CVE-2026-14618?
CVE-2026-14618 is associated with a remote denial of service attack.
How can I mitigate CVE-2026-14618?
Mitigation for CVE-2026-14618 involves applying updates or patches for Open5GS version 2.7.8 or later.
Is the exploit for CVE-2026-14618 publicly available?
Yes, the exploit for CVE-2026-14618 is now public and can be utilized for denial of service attacks.