CVE-2026-107166 | Open5GS up to 2.7.7 GTP-U Receive Path src/upf/gtp-path.c ogs_pfcp_xact_local_create allocation of resources (Issue 4792)

October 7, 2026 Yanac

A vulnerability was found in Open5GS up to 2.7.7. It has been rated as problematic. This vulnerability affects the function ogs_pfcp_xact_local_create of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources.

This vulnerability is tracked as CVE-2026-107166. The attack is possible to be carried out remotely. Moreover, an exploit is present.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More