Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-0828

NIXPKGS-2026-0828
published on
Permalink CVE-2026-4988
3.7 LOW
  • CVSS version: 3.1
  • Attack vector (AV):
  • Attack complexity (AC):
  • Privileges required (PR):
  • User interaction (UI):
  • Scope (S):
  • Confidentiality impact (C):
  • Integrity impact (I):
  • Availability impact (A):
updated 1 month ago by @LeSuisse Activity log
  • Created suggestion
  • @LeSuisse ignored package open5gs-webui
  • @LeSuisse accepted
  • @LeSuisse published on GitHub
Open5GS CCA Message smf_s6b denial of service

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks.

Affected products

Open5GS
  • ==2.7.6

Matching in nixpkgs

Ignored packages (1)

Package maintainers

Upstream issue: https://github.com/open5gs/open5gs/issues/4342