CVE-2026-7585

A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-404

• https://github.com/open5gs/open5gs/Product
• https://github.com/open5gs/open5gs/issues/4403Issue Tracking
• https://vuldb.com/submit/804334Third Party Advisory, VDB Entry
• https://vuldb.com/submit/804335Third Party Advisory, VDB Entry
• https://vuldb.com/submit/804337Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360533Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360533/ctiPermissions Required, VDB Entry
• https://vuldb.com/submit/804334Third Party Advisory, VDB Entry
• https://vuldb.com/submit/804335Third Party Advisory, VDB Entry
• https://vuldb.com/submit/804337Third Party Advisory, VDB Entry

Published

May 1, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75842ArcadeDB versions before 26.8.1 contain an arbitrary file re…7.7
• CVE-2026-75843ArcadeDB before 26.8.1 fails to bind the authenticated princ…9.9
• CVE-2026-75844ArcadeDB versions before 26.8.1 contain a server-side reques…7.1
• CVE-2026-75845ArcadeDB versions 26.4.2 through 26.7.3 contain an authoriza…6.3
• CVE-2026-75846ArcadeDB before 26.8.1 (affected versions <= 26.7.3) contain…7.1
• CVE-2026-75847Cleartext Storage of Sensitive Information vulnerability in …5.9
• CVE-2026-75850ArcadeDB before 26.8.1 fails to bind the authenticated princ…4.2
• CVE-2026-75851ArcadeDB server (com.arcadedb:arcadedb-server) in versions 2…9.9
• CVE-2026-75852ArcadeDB versions before 26.8.1 fail to enforce SASL authent…9.8
• CVE-2026-75853ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcade…8.8
• CVE-2026-75854ArcadeDB versions before 26.8.1 contain a missing authentica…9.8
• CVE-2026-75855ArcadeDB versions before 26.8.1 fail to sanitize database na…8.7