CVE-2026-82548
MediumCVSS 5.3Summary
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Risk Assessment
The risk is the potential for remote disclosure of sensitive information, potentially compromising data confidentiality in Magma systems.
Recommendation
It is recommended to apply patches or updates from the vendor and monitor systems for attempts to exploit this vulnerability.
Other vulnerabilities in Linux Foundation Magma
See all- CVE-2026-82552Medium
A security vulnerability has been detected in Linux Foundation Magma 1.9.0. The vulnerability affects an unknown functionality in the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack can be carried out remotely. The exploit has been disclosed publicly.
- CVE-2026-82551Medium
A weakness has been identified in Linux Foundation Magma 1.9.0 in an unknown function of the file ngap_amf_handlers.c of the NGSetup Handler component. Manipulation can lead to a state issue. The attack can be executed remotely, and the exploit is publicly available.
- CVE-2026-82550Medium
A security flaw has been discovered in Linux Foundation Magma 1.9.0 in an unknown function of the NGSetupRequest Handler component. Manipulating the NG-IoT-DefaultPagingDRX argument results in improper input validation. Remote exploitation is possible, and the exploit has been released publicly. The project was informed but has not responded.
- CVE-2026-82549High
A vulnerability in Linux Foundation Magma 1.9.0 affects an unknown function in the SecurityModeComplete Handler component. This manipulation leads to improper validation of the integrity check value. The attack may be launched remotely, and the exploit is publicly available.
Original NVD description (English source)
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.