CVE-2026-107166

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pfcp_xact_local_create of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 9ffc252482d9b03ac01abcedbe95497ff4f95dd0. It is recommended to apply a patch to fix this issue.

• CWE-400
• CWE-770

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/commit/9ffc252482d9b03ac01abcedbe95497ff4f95dd0
• https://github.com/open5gs/open5gs/issues/4792
• https://github.com/open5gs/open5gs/pull/4806
• https://vuldb.com/cve/CVE-2026-107166
• https://vuldb.com/submit/994175
• https://vuldb.com/vuln/414968
• https://vuldb.com/vuln/414968/cti

Published

Oct 7, 2026

Last Modified

Oct 7, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10715Camaleon CMS 2.9.2 contains an improper authorization vulner…5.1
• CVE-2026-107151Missing authentication has been found in remote-execution ta…5.9
• CVE-2026-107159MiniUPnPd through 2.3.11 built with --strict contains a divi…6.5
• CVE-2026-10716Directus contains an authenticated SQL injection vulnerabili…7.5
• CVE-2026-107161A heap-based buffer overflow flaw was found in Cyrus SASL. T…7.5
• CVE-2026-107162Express Gateway through 1.16.11 contains an authentication b…6.8
• CVE-2026-107167A flaw was found in m17n-lib. A user providing specially cra…6.2
• CVE-2026-107168A flaw was found in m17n-lib. By providing crafted input con…6.2
• CVE-2026-107169A flaw was found in m17n-lib. An attacker could provide spec…6.2
• CVE-2026-10717Out of bounds write and reads in openSeaChest’s --showSCSIDe…1.8
• CVE-2026-107170A flaw was found in m17n-lib. A partial failure during libra…2.9
• CVE-2026-107174A flaw was found in source-to-image. When unpacking archive …6.4