Is CVE-2026-82551 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82551 being exploited in the wild.

How severe is CVE-2026-82551?

Medium severity, with a CVSS score of 5.3, published 30 August 2026.

Is there a fix for CVE-2026-82551?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-82551 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-82551?

Check whether you run Linux Foundation Magma at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82551: Linux Foundation Magma NGSetup Handler state issue

CVE-2026-82551 · Severity: medium · CVSS 5.3 · Published 2026-08-30

Magma, an open-source mobile core network platform, improperly validates 5G setup handshakes between base stations and the Access Gateway. An attacker can send NGAP messages without completing the required NGSetup process, bypassing security checks and gaining unauthorized access to base station capabilities, user contexts, and the ability to register unauthorized devices on the network.

Technologies: Linux Foundation Magma. Vendors: Linux Foundation.

Quick answers

Is CVE-2026-82551 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82551 being exploited in the wild.
How severe is CVE-2026-82551?: Medium severity, with a CVSS score of 5.3, published 30 August 2026.
Which products and versions are affected?: Linux Foundation Magma 1.9.0.
Is there a fix for CVE-2026-82551?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-82551 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-82551?: Check whether you run Linux Foundation Magma at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a state validation bypass in the NGSetup Handler component (ngap_amf_handlers.c) of Magma's Access Management Function (AMF). The NGSetup message should be the first NGAP message after establishing an SCTP channel, but the implementation fails to enforce this requirement. An attacker with network access to the AMF can send NGAP messages (e.g., InitialUEMessage) without completing NGSetup, bypassing gNB capability negotiation and security validation. This allows an attacker to spoof base station identities, inject arbitrary UE contexts, and register unauthorized devices. The vulnerability requires network access to the NGAP interface but no authentication. Patches or workarounds are not mentioned in the available advisory.

Affected products

Linux Foundation Magma 1.9.0

Timeline

2026-07-15: disclosed: Issue reported on GitHub
2026-08-30: advisory: CVE-2026-82551 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.