CVE-2026-82550: Improper Input Validation in Linux Foundation Magma

This vulnerability affects Linux Foundation Magma 1.9.0, specifically the NGSetupRequest Handler component. Improper input validation occurs when the NG-IoT-DefaultPagingDRX argument is manipulated, enabling remote attackers to exploit the flaw without authentication or user interaction. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. Although the issue was reported early to the project, no response or fix has been provided yet. Public exploit code has been released, increasing the risk of attacks.

Successful exploitation could allow remote attackers to leverage improper input validation to potentially disrupt or manipulate the affected component. The vulnerability requires no privileges or user interaction, making it easier to exploit remotely. The presence of public exploit code increases the likelihood of exploitation attempts. However, the exact impact beyond improper input validation is not detailed in the available information.

No official patch or remediation has been announced by the vendor as of the current information. Users of Linux Foundation Magma 1.9.0 should monitor vendor advisories for updates. In the meantime, consider implementing network-level protections to restrict access to the vulnerable component and closely monitor for suspicious activity related to NGSetupRequest Handler. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.