Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-107166— Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

Quick assessment

Affected
n/a Open5GS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Open5GS 2.7.7 及更早版本中发现了一个漏洞。该漏洞影响 GTP-U 接收路径组件中的 文件下的 函数。此漏洞可能导致资源分配问题。攻击者可远程利用该漏洞。该漏洞的利用方法已公开，可能被用于实施攻击。修复补丁名为：9ffc252482d9b03ac01abcedbe95497ff4f95dd0。建议尽快应用该补丁以修复此问题。

CVSS 5.3 · Medium

Possible ATT&CK Techniques 1 AI

T1496 · Resource Hijacking
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-107166

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources
Source: CVE Program / CVE List V5
Vulnerability Description
A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pfcp_xact_local_create of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 9ffc252482d9b03ac01abcedbe95497ff4f95dd0. It is recommended to apply a patch to fix this issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- Open5GS 2.7.0 cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-107166

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-107166

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-107166 (1)

Other References for CVE-2026-107166 (6)

Same Patch Batch · n/a · 2026-10-07 · 17 CVEs total

CVE-2026-88514 iTerm2 macOS 低于 3.6.12 本地敏感信息泄露漏洞
CVE-2026-42618 NTFS-3G堆缓冲区溢出漏洞
CVE-2026-46572 ntfs-3G堆缓冲区溢出漏洞
CVE-2026-42616 NTFS-3G heap缓冲区溢出漏洞
CVE-2026-42617 ntfs-3g堆缓冲区溢出漏洞
CVE-2026-46569 ntfs-3G低于2026.7.7的堆缓冲区溢出漏洞
CVE-2026-46571 NTFS-3G 越界读漏洞，影响 2026.7.7 前版本
CVE-2026-46570 NTFS-3G <2026.7.7堆溢出漏洞
CVE-2025-70516 Fonvil X7A v2.6.0.1182 Websocket认证绕过漏洞
CVE-2025-70515 Fanvil x7a 2.6.0.1182存储型XSS漏洞
CVE-2025-70517 Fanvil x7a 2.6.0.1182 CSRF漏洞
CVE-2025-70520 Fanvil x7a 2.6.0.1182 认证绕过漏洞
CVE-2025-70519 Fanvil x7a v2.6.0.1182存在存储型XSS漏洞
CVE-2025-70521 Fanvil x7a v2.6.0.1182诊断Ping命令注入漏洞
CVE-2025-70518 Fintel x7a固件2.6.0.1182远程命令执行漏洞
CVE-2025-70522 Fanvil x7a V2.6.0.1182存在CSRF漏洞

IV. Related Vulnerabilities

Same product: Open5GS
Same vendor: n/a
Same weakness: CWE-770

V. Comments for CVE-2026-107166

No comments yet

Leave a comment