CVE-2026-30046 is a reachable assertion vulnerability found in the NUDM-UECM interface of Open5GS version 2.7.6. An attacker can exploit this vulnerability by sending a specially crafted DELETE request to the affected interface, triggering an assertion failure. The result is a Denial of Service (DoS) condition, potentially disrupting 5G core network services relying on Open5GS. The vulnerability has been documented on the NVD and reported via a GitHub issue on the Open5GS repository. No authentication context is specified, suggesting the attack surface may be accessible to unauthenticated or network-level attackers. The issue highlights risks in open-source 5G core implementations. Given the critical nature of 5G infrastructure, the impact of a DoS in this component could be significant.
