{"id":"CVE-2026-82548","state":"PUBLISHED","title":"Linux Foundation Magma InitialUEMessage information disclosure","description":"A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.","publishedAt":"2026-08-30T15:00:10.066Z","updatedAt":"2026-09-01T14:08:54.189Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Linux Foundation Magma"],"affected":[{"vendor":"Linux Foundation","product":"Magma","versions":[{"version":"1.9.0","status":"affected"}],"cpes":["cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"],"modules":["InitialUEMessage Handler"]}],"references":["https://vuldb.com/vuln/397064","https://vuldb.com/vuln/397064/cti","https://vuldb.com/cve/CVE-2026-82548","https://vuldb.com/submit/891573","https://github.com/magma/magma/issues/16022","https://www.linuxfoundation.org/"],"weaknesses":["CWE-200","CWE-284"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/82xxx/CVE-2026-82548.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-82548","state":"PUBLISHED","datePublished":"2026-08-30T15:00:10.066Z","dateUpdated":"2026-09-01T14:08:54.189Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-29T18:43:58.210Z"},"containers":{"cna":{"title":"Linux Foundation Magma InitialUEMessage information disclosure","descriptions":[{"lang":"en","value":"A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."}],"affected":[{"vendor":"Linux Foundation","product":"Magma","versions":[{"version":"1.9.0","status":"affected"}],"cpes":["cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"],"modules":["InitialUEMessage Handler"]}],"references":[{"url":"https://vuldb.com/vuln/397064","name":"VDB-397064 | Linux Foundation Magma InitialUEMessage information disclosure","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/397064/cti","name":"VDB-397064 | CTI Indicators (IOB, IOC, TTP)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-82548","name":"CVE-2026-82548 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/891573","name":"Submit #891573 | Linux Foundation Projects Magma 5G v1.9.0 Exposure of Private Personal Information to an Unauthorized Acto","tags":["third-party-advisory"]},{"url":"https://github.com/magma/magma/issues/16022","tags":["exploit","issue-tracking"]},{"url":"https://www.linuxfoundation.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"Information Disclosure"}]},{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"Improper Access Controls"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-30T15:00:10.066Z"},"timeline":[{"time":"2026-08-29T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-29T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-29T20:49:27.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"shovon0203 (VulDB User)","type":"reporter"}],"tags":["x_open-source"],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-01T14:08:42.423996Z","id":"CVE-2026-82548","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-01T14:08:54.189Z"}}]}}}