CVE-2026-7601

A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_type leads to denial of service. The attack is possible to be carried out remotely. Upgrading to version 2.7.7 is able to address this issue. The identifier of the patch is ebc66942b6f8f1fab2d640e71cf4e9f1a423b426. It is advisable to upgrade the affected component.

• CWE-404

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/commit/ebc66942b6f8f1fab2d640e71cf4e9f1a423b426
• https://github.com/open5gs/open5gs/issues/4321
• https://github.com/open5gs/open5gs/releases/tag/v2.7.7
• https://vuldb.com/submit/805675
• https://vuldb.com/vuln/360558
• https://vuldb.com/vuln/360558/cti

Published

May 2, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76002ColdFusion is affected by a reflected Cross-Site Scripting (…6.1
• CVE-2026-76003A weakness has been identified in UTT HiPER 1200GW up to 2.5…9.9
• CVE-2026-76004A security vulnerability has been detected in UTT HiPER 1250…9.9
• CVE-2026-76006The Photo Gallery by Ays – Responsive Image Gallery plugin f…4.9
• CVE-2026-76008A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affec…10
• CVE-2026-76009The Next-Cart Store to WooCommerce Migration plugin for Word…8.1
• CVE-2026-76014A vulnerability has been found in BusyBox up to 1.30.1. This…3.3
• CVE-2026-76017Use after free in Chromoting in Google Chrome prior to 151.0…8.8
• CVE-2026-76018Privilege elevation in Import in Google Chrome prior to 151.…8.8
• CVE-2026-76019Incorrect authorization in Workers in Google Chrome prior to…8.1
• CVE-2026-7602A vulnerability was found in JeecgBoot up to 3.9.1. Affected…6.3
• CVE-2026-76020Race condition in V8 in Google Chrome prior to 151.0.7922.17…7.5