CVE-2026-92417

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as 8f07b507b78ff94776f2cd49276eb116ed93d7f2. A patch should be applied to remediate this issue.

• CWE-404
• CWE-476

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/commit/8f07b507b78ff94776f2cd49276eb116ed93d7f2
• https://github.com/open5gs/open5gs/issues/4745
• https://vuldb.com/cve/CVE-2026-92417
• https://vuldb.com/submit/940465
• https://vuldb.com/vuln/405595
• https://vuldb.com/vuln/405595/cti

Published

Sep 16, 2026

Last Modified

Sep 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92402A security flaw has been discovered in ChangeWeDer crm up to…6.3
• CVE-2026-92405A security vulnerability has been detected in SourceCodester…7.3
• CVE-2026-92406A vulnerability was detected in SourceCodester Inventory and…7.3
• CVE-2026-9241The FOX – Currency Switcher Professional for WooCommerce plu…4.3
• CVE-2026-92413A flaw has been found in Artifex MuPDF up to b6d17493700c621…4.3
• CVE-2026-92416A vulnerability has been found in Open5GS up to 2.8.0. Affec…4.3
• CVE-2026-92418A vulnerability was determined in ChangeWeDer crm up to c07b…3.5
• CVE-2026-9242The RegistrationMagic – Custom Registration Forms, User Regi…5.3
• CVE-2026-9243The Plus Addons for Elementor plugin for WordPress is vulner…6.4
• CVE-2026-9244Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-9245Improper input validation in the external authentication pro…5
• CVE-2026-92455yshop-crm through 2.1.3 fails to enforce authorization on th…4.3