CVE detail
CVE-2026-8743
A vulnerability was found in Open5GS up to 2.7.6. This impacts the function ran_ue_find_by_amf_ue_ngap_id of the file src/amf/context.c of the component AMF/MME. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1. It is suggested to install a patch to address this issue.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 4.5
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
7 source links · newest first
- https://vuldb.com/vuln/364330/ctivuldb.com
No excerpt available.
Exploitvuldb.comMay 17, 2026, 10:16 AM - https://vuldb.com/vuln/364330vuldb.com
No excerpt available.
Exploitvuldb.comMay 17, 2026, 10:16 AM - https://vuldb.com/submit/814559vuldb.com
No excerpt available.
Exploitvuldb.comMay 17, 2026, 10:16 AM No excerpt available.
Exploitgithub.comMay 17, 2026, 10:16 AMNo excerpt available.
Exploitgithub.comMay 17, 2026, 10:16 AMNo excerpt available.
Exploitgithub.comMay 17, 2026, 10:16 AM- https://github.com/open5gs/open5gs/github.com
No excerpt available.
Exploitgithub.comMay 17, 2026, 10:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
1 repository references · best confidence 0.90 · max 0 stars
- open5gs/open5gsHigh confidencegithubNVD Exploit reference0 starsDiscovered Jul 21, 2026, 12:20 AM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-16224CVSS 5.3 · Medium
A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The…
- CVE-2026-16199CVSS 2.1 · Low
A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function ExecTool.Execute of the file goclaw/internal/tools/credentialed_exec.go. Executing…
- CVE-2026-16121CVSS 2.1 · Low
A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isSafeBin of the file internal/tools/exec_approval.go. The manipulation leads to i…
- CVE-2026-15594CVSS 2.9 · Low
A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component Media Handler…
- CVE-2026-15510CVSS 2.1 · Low
A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The atta…
- CVE-2026-15509CVSS 2.1 · Low
A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role leads…