Threat database

CVE-2026-82552 is a medium severity denial of service vulnerability in Linux Foundation Magma version 1.9.0. It affects an unknown functionality within the gNB Termination Handler component, specifically in the file tasks/ngap/ngap_amf.c. The vulnerability can be exploited remotely without user interaction or elevated privileges. Public exploit code has been disclosed, but there are no confirmed reports of exploitation in the wild. No official patch or remediation guidance is currently available.

CVE-2026-82551 is a medium-severity vulnerability in Linux Foundation Magma version 1.9.0. It involves a state issue in an unknown function within the NGSetup Handler component (file ngap_amf_handlers.c). The vulnerability can be exploited remotely without authentication or user interaction. Public exploit code is available. No official patch or remediation guidance has been provided yet.

CVE-2026-82550 is a medium severity vulnerability in Linux Foundation Magma version 1.9.0. It involves improper input validation in the NGSetupRequest Handler component when manipulating the NG-IoT-DefaultPagingDRX argument. The flaw allows remote exploitation without requiring privileges or user interaction. Public exploit code is available, but no official patch or remediation has been announced by the vendor.

CVE-2026-82549 is a medium severity vulnerability in Linux Foundation Magma version 1.9.0. It involves improper validation of an integrity check value in the SecurityModeComplete Handler component. The vulnerability can be exploited remotely without authentication. Public exploit code is available. No official patch or remediation guidance has been provided yet.

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and could be used.