Is CVE-2026-7601 actively exploited?

No active exploitation of CVE-2026-7601 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-7601 be exploited remotely?

Yes. CVE-2026-7601 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-7601?

CVE-2026-7601 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-7601

MEDIUM

CVE-2026-7601

CWE-404Published: May 2, 2026· Updated: May 5, 2026

4.3

CVSS v3.1

EPSS:0.06%probability of exploitation in 30 daysPercentile:17.6th

Official Description

A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_type leads to denial of service. The attack is possible to be carried out remotely. Upgrading to version 2.7.7 is able to address this issue. The identifier of the patch is ebc66942b6f8f1fab2d640e71cf4e9f1a423b426. It is advisable to upgrade the affected component.

NVD Source

Technical Analysis

CVE-2026-7601 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.