Vulnerability · Published Aug 30, 2026 · Assigned by VulDB
CVE-2026-82548Linux Foundation Magma InitialUEMessage information disclosure
Medium 5.3
In plain English
A medium-severity information exposure in Magma from Linux Foundation. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 54.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux Foundation | Magma | 1.9.0 |
Weakness: CWE-200, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-397064 | Linux Foundation Magma InitialUEMessage information disclosure vdb-entry
- VDB-397064 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- CVE-2026-82548 | CVE Analysis and Report third-party-advisory
- Submit #891573 | Linux Foundation Projects Magma 5G v1.9.0 Exposure of Private Personal Information to an Unauthorized Acto third-party-advisory
- https://github.com/magma/magma/issues/16022 exploit, issue-tracking
- https://www.linuxfoundation.org/ product