Vulnerability · Published Aug 30, 2026 · Assigned by VulDB
CVE-2026-82549Linux Foundation Magma SecurityModeComplete integrity check
High 8.3
In plain English
A high-severity insufficient verification of data authenticity in Magma from Linux Foundation. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.3%top 82.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux Foundation | Magma | 1.9.0 |
Weakness: CWE-354, CWE-345 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-397065 | Linux Foundation Magma SecurityModeComplete integrity check vdb-entry
- VDB-397065 | CTI Indicators (IOB, IOC) signature, permissions-required
- CVE-2026-82549 | CVE Analysis and Report third-party-advisory
- Submit #891574 | Linux Foundation Projects Magma 5G v1.9.0 Missing Support for Integrity Check third-party-advisory
- https://github.com/magma/magma/issues/16024 exploit, issue-tracking
- https://www.linuxfoundation.org/ product