A vulnerability classified as critical was found in Open5GS up to 2.7.6. This issue affects the function
sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can lead to memory corruption.
This vulnerability appears as CVE-2026-2521. The attack may be performed from remote. In addition, an exploit is available.
The project was informed of the problem early through an issue report but has not responded yet.
