How many CVEs does Open5GS have?

Open5GS has 177 published CVE records since 2021, including 149 in the last two years.

How many Open5GS CVEs are in CISA KEV?

None of Open5GS's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Open5GS products have the most CVEs?

The Open5GS products with the most published CVEs are open5gs, Open5GS AMF, AMF Service, Open5GS SMF, Open5GS v2.7.5.

What are the most common weakness types in Open5GS CVEs?

Open5GS's CVEs most often map to these CWE weakness types: CWE-404 (Improper Resource Shutdown or Release), CWE-617 (Reachable Assertion), CWE-400 (Uncontrolled Resource Consumption), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

Are there public exploits for Open5GS vulnerabilities?

Yes — 136 of Open5GS's CVEs have a known public exploit.

How many critical Open5GS vulnerabilities are there?

Open5GS has 3 critical and 50 high-severity CVEs.

What is the average severity of Open5GS CVEs?

The average CVSS base score across Open5GS's scored CVEs is 6.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

177 CVEs

Open5GS Vulnerabilities

Name: Open5GS vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Open5GS.

177

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

136

Public exploits

PoC or exploit code

6.5

Avg CVSS

2021–2026

Overview

Open5GS has 177 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 136 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Open5GS products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Open5GS's vulnerability posture, as a share of its 177 published CVEs.

Average CVSS: 6.5
Critical / high: 30%
Actively exploited (KEV): 0%
Public exploit available: 77%
Patch available: 40%

Severity and exploitation

How the CVSS severity of Open5GS's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High50

Medium122

Low2

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Open5GS's CVEs are currently listed in CISA's KEV catalog.

Public exploits

136

136 of Open5GS's CVEs have a known public exploit available.

Most affected products

The Open5GS products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Open5GS CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Open5GS CVE records.

Disclosure activity by year

How many Open5GS CVEs were published each year.

2021

4

2022

10

2023

5

2024

9

2025

62

2026

87

Latest Open5GS CVEs

The most recently disclosed vulnerabilities affecting Open5GS.

Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler
CWE-125
High · CVSS 8.6
EPSS 0.4%2026-07-14
Open5GS AMF context.c amf_context_final use after free
CWE-416
Medium · CVSS 4.8
EPSS 0.1%2026-07-09
Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service
CWE-404
Medium · CVSS 5.3
EPSS 0.3%2026-07-04
Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode race condition
CWE-362
Low · CVSS 2.3
EPSS 0.2%2026-06-02
Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication
CWE-287
Medium · CVSS 6.9
EPSS 0.4%2026-05-31
Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption
CWE-404
Medium · CVSS 5.3
EPSS 0.3%2026-05-30
Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service
CWE-404
Medium · CVSS 5.3
EPSS 0.3%2026-05-30
Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of service
CWE-404
Medium · CVSS 5.3
EPSS 0.4%2026-05-30
Open5GS Shared NF-profile nnrf-handler.c denial of service
CWE-404
Medium · CVSS 5.3
EPSS 0.3%2026-05-30
Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write
CWE-119
Medium · CVSS 5.3
EPSS 0.3%2026-05-30
Open5GS Shared NF-profile nnrf-handler.c denial of service
CWE-404
Medium · CVSS 5.3
EPSS 0.3%2026-05-30
Open5GS NRF nghttp2-server.c discover_handler use after free
CWE-416
Medium · CVSS 5.3
EPSS 0.4%2026-05-17

Track new Open5GS CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Open5GS CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

wegia179 CVEs FreeRDP177 CVEs OpenHarmony177 CVEs owncloud176 CVEs Kashipara176 CVEs Zephyr Project175 CVEs Sophos174 CVEs Devolutions174 CVEs

Browse all vendors

Frequently asked questions

Common questions about Open5GS vulnerabilities.

How many CVEs does Open5GS have?: Open5GS has 177 published CVE records since 2021, including 149 in the last two years.
How many Open5GS CVEs are in CISA KEV?: None of Open5GS's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Open5GS products have the most CVEs?: The Open5GS products with the most published CVEs are open5gs, Open5GS AMF, AMF Service, Open5GS SMF, Open5GS v2.7.5.
What are the most common weakness types in Open5GS CVEs?: Open5GS's CVEs most often map to these CWE weakness types: CWE-404 (Improper Resource Shutdown or Release), CWE-617 (Reachable Assertion), CWE-400 (Uncontrolled Resource Consumption), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).
Are there public exploits for Open5GS vulnerabilities?: Yes — 136 of Open5GS's CVEs have a known public exploit.
How many critical Open5GS vulnerabilities are there?: Open5GS has 3 critical and 50 high-severity CVEs.
What is the average severity of Open5GS CVEs?: The average CVSS base score across Open5GS's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Open5GS vulnerabilities

Monitor new Open5GS vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing