CVE-2026-82549
HighCVSS 8.3Summary
A vulnerability in Linux Foundation Magma 1.9.0 affects an unknown function in the SecurityModeComplete Handler component. This manipulation leads to improper validation of the integrity check value. The attack may be launched remotely, and the exploit is publicly available.
Risk Assessment
Risk of integrity compromise in Magma network communications, potentially allowing an attacker to intercept or modify data.
Recommendation
Update Magma to the latest version and monitor security advisories from the Linux Foundation.
Other vulnerabilities in Linux Foundation Magma
See all- CVE-2026-82552Medium
A security vulnerability has been detected in Linux Foundation Magma 1.9.0. The vulnerability affects an unknown functionality in the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack can be carried out remotely. The exploit has been disclosed publicly.
- CVE-2026-82551Medium
A weakness has been identified in Linux Foundation Magma 1.9.0 in an unknown function of the file ngap_amf_handlers.c of the NGSetup Handler component. Manipulation can lead to a state issue. The attack can be executed remotely, and the exploit is publicly available.
- CVE-2026-82550Medium
A security flaw has been discovered in Linux Foundation Magma 1.9.0 in an unknown function of the NGSetupRequest Handler component. Manipulating the NG-IoT-DefaultPagingDRX argument results in improper input validation. Remote exploitation is possible, and the exploit has been released publicly. The project was informed but has not responded.
- CVE-2026-82548Medium
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Original NVD description (English source)
A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used.