CVE-2026-92417

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as 8f07b507b78ff94776f2cd49276eb116ed93d7f2. A patch should be applied to remediate this issue.

• CWE-404
• CWE-476

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/commit/8f07b507b78ff94776f2cd49276eb116ed93d7f2
• https://github.com/open5gs/open5gs/issues/4745
• https://vuldb.com/cve/CVE-2026-92417
• https://vuldb.com/submit/940465
• https://vuldb.com/vuln/405595
• https://vuldb.com/vuln/405595/cti

Published

Sep 16, 2026

Last Modified

Sep 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92411The WP Delicious WordPress plugin before 1.10.8 does not va…6.8
• CVE-2026-92412The Five Star Restaurant Reviews WordPress plugin before 2.3…7.1
• CVE-2026-92413A flaw has been found in Artifex MuPDF up to b6d17493700c621…4.3
• CVE-2026-92414: Session Fixation / Session Reuse across Users vulnerabilit…9.1
• CVE-2026-92415— Use of Externally-Controlled Input to Select Classes or Co…5.3
• CVE-2026-92416A vulnerability has been found in Open5GS up to 2.8.0. Affec…4.3
• CVE-2026-92418A vulnerability was determined in ChangeWeDer crm up to c07b…3.5
• CVE-2026-92419WEBCON BPS is vulnerable to Insecure Direct Object Reference…5.3
• CVE-2026-9242The RegistrationMagic – Custom Registration Forms, User Regi…5.3
• CVE-2026-92420The Hydra Booking — Appointment Scheduling & Booking Calenda…3.8
• CVE-2026-92421The Hydra Booking — Appointment Scheduling & Booking Calenda…4.7
• CVE-2026-92422The Meow Gallery WordPress plugin before 5.5.5 does not prop…6.5