CVE-2026-8743

A vulnerability was found in Open5GS up to 2.7.6. This impacts the function ran_ue_find_by_amf_ue_ngap_id of the file src/amf/context.c of the component AMF/MME. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1. It is suggested to install a patch to address this issue.

• CWE-266
• CWE-285

• https://github.com/open5gs/open5gs/Product
• https://github.com/open5gs/open5gs/commit/5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1Patch
• https://github.com/open5gs/open5gs/issues/4498Exploit, Issue Tracking
• https://github.com/open5gs/open5gs/pull/4553Issue Tracking, Patch
• https://vuldb.com/submit/814559Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/364330Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/364330/ctiPermissions Required, VDB Entry

Published

May 17, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8736A security flaw has been discovered in Oinone Pamirs up to 7…4.1
• CVE-2026-8737A weakness has been identified in Sanluan PublicCMS 5.202506…5.5
• CVE-2026-8738A security vulnerability has been detected in Sanluan Public…6.5
• CVE-2026-8739A vulnerability was detected in Sanluan PublicCMS 5.202506.d…5.5
• CVE-2026-8740A flaw has been found in Sanluan PublicCMS 5.202506.d. The i…6.3
• CVE-2026-8741A vulnerability has been found in EMQX up to 6.2.0. This aff…3.1
• CVE-2026-8744A vulnerability was determined in Open5GS up to 2.7.7. Affec…6.5
• CVE-2026-8745A vulnerability was identified in Open5GS up to 2.7.7. Affec…6.5
• CVE-2026-8746A security flaw has been discovered in Open5GS up to 2.7.7. …6.5
• CVE-2026-8747A weakness has been identified in Z-BlogPHP 1.7.4.3430. This…6.3
• CVE-2026-8750A vulnerability was identified in h2oai h2o-3 up to 7402. Af…7.5
• CVE-2026-8751A security flaw has been discovered in h2oai h2o-3 up to 740…9.8