{"id":"CVE-2026-82549","state":"PUBLISHED","title":"Linux Foundation Magma SecurityModeComplete integrity check","description":"A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used.","publishedAt":"2026-08-30T15:30:09.964Z","updatedAt":"2026-08-31T16:17:24.722Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P","source":"VulDB"},"assigner":"VulDB","products":["Linux Foundation Magma"],"affected":[{"vendor":"Linux Foundation","product":"Magma","versions":[{"version":"1.9.0","status":"affected"}],"cpes":["cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"],"modules":["SecurityModeComplete Handler"]}],"references":["https://vuldb.com/vuln/397065","https://vuldb.com/vuln/397065/cti","https://vuldb.com/cve/CVE-2026-82549","https://vuldb.com/submit/891574","https://github.com/magma/magma/issues/16024","https://www.linuxfoundation.org/"],"weaknesses":["CWE-354","CWE-345"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/82xxx/CVE-2026-82549.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-82549","state":"PUBLISHED","datePublished":"2026-08-30T15:30:09.964Z","dateUpdated":"2026-08-31T16:17:24.722Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-29T18:44:02.751Z"},"containers":{"cna":{"title":"Linux Foundation Magma SecurityModeComplete integrity check","descriptions":[{"lang":"en","value":"A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used."}],"affected":[{"vendor":"Linux Foundation","product":"Magma","versions":[{"version":"1.9.0","status":"affected"}],"cpes":["cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"],"modules":["SecurityModeComplete Handler"]}],"references":[{"url":"https://vuldb.com/vuln/397065","name":"VDB-397065 | Linux Foundation Magma SecurityModeComplete integrity check","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/397065/cti","name":"VDB-397065 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-82549","name":"CVE-2026-82549 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/891574","name":"Submit #891574 | Linux Foundation Projects Magma 5G v1.9.0 Missing Support for Integrity Check","tags":["third-party-advisory"]},{"url":"https://github.com/magma/magma/issues/16024","tags":["exploit","issue-tracking"]},{"url":"https://www.linuxfoundation.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":8.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":8.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-354","type":"CWE","lang":"en","description":"Improper Validation of Integrity Check Value"}]},{"descriptions":[{"cweId":"CWE-345","type":"CWE","lang":"en","description":"Insufficient Verification of Data Authenticity"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-30T15:30:09.964Z"},"timeline":[{"time":"2026-08-29T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-29T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-29T20:49:32.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"shovon0203 (VulDB User)","type":"reporter"}],"tags":["x_open-source"],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-31T16:17:11.581574Z","id":"CVE-2026-82549","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-31T16:17:24.722Z"}}]}}}