CVE-2026-82547: Improper Authentication in Linux Foundation Magma

This vulnerability in Linux Foundation Magma 1.9.0 is caused by improper authentication handling in the Registration Complete Message Handler component, located in an unspecified function of tasks/amf/amf_fsm.cpp. The flaw allows remote attackers to bypass authentication mechanisms, potentially leading to unauthorized access or actions. The CVSS 4.0 base score is 6.9, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and limited impact on confidentiality and availability. Exploit code has been publicly disclosed, increasing the risk of exploitation. However, no vendor advisory or patch information is currently available.

The vulnerability allows remote attackers to bypass authentication controls in Magma 1.9.0, which could lead to unauthorized access or manipulation of the affected component. The impact is rated medium severity with limited confidentiality and availability impact. The presence of public exploit code increases the risk of exploitation, though no active exploitation is known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. Consider applying additional network-level access controls to restrict exposure of the affected component if feasible.