CWE-404— Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.— MITRE CWE catalog

888 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-404page 15 of 18

CVE-2026-8781MEDIUMCVSS 4.3EG 4.3
2026-05-18
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched re…
CVE-2026-8745MEDIUMCVSS 4.3EG 4.3
2026-05-17
A vulnerability was identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function ogs_timer_add in the library /src/ausf/nausf-handler.c of the component AUSF. The manipulation leads to denial of service. The attack can…
CVE-2026-8744MEDIUMCVSS 4.3EG 4.3
2026-05-17
A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function ogs_sbi_subscription_data_add/ogs_sbi_nf_service_add in the library /lib/sbi/context.c of the component NRF. Executing a manipulation can lead to denial of ser…
CVE-2026-8731MEDIUMCVSS 4.3EG 4.3
2026-05-17
A vulnerability has been found in Open5GS up to 2.7.7. Affected is the function ogs_sbi_client_add in the library /lib/sbi/client.c of the component NRF. The manipulation of the argument client_pool leads to denial of service. It is possib…
CVE-2026-8730MEDIUMCVSS 4.3EG 4.3
2026-05-17
A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogs_sbi_nf_instance_set_id in the library /lib/sbi/context.c of the component NRF. Executing a manipulation of the argument nfInstanceId can lead to denial of service.…
CVE-2026-8729MEDIUMCVSS 4.3EG 4.3
2026-05-17
A vulnerability was detected in Open5GS up to 2.7.7. This affects an unknown function in the library /lib/sbi/message.c of the component NRF. Performing a manipulation of the argument service-names/snssais results in denial of service. The…
CVE-2026-8728MEDIUMCVSS 4.3EG 4.3
2026-05-17
A security vulnerability has been detected in Open5GS up to 2.7.7. The impacted element is the function ogs_sbi_discovery_option_parse_plmn_list in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argument target-…
CVE-2026-40136MEDIUMCVSS 4.3EG 4.3
2026-05-12
SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions temporarily preventing access. However, the application itself cannot be compromised resulting in a low impact on availabi…
CVE-2026-8292MEDIUMCVSS 4.3EG 4.3
2026-05-11
A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarel_parse in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argument hnrf-uri leads to denial of service…
CVE-2026-8291MEDIUMCVSS 4.3EG 4.3
2026-05-11
A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogs_nnrf_nfm_handle_nf_profile of the file lib/sbi/nnrf-handler.c of the component NRF. This manipulation causes denial of service. The attack is possible to b…
CVE-2026-8290MEDIUMCVSS 4.3EG 4.3
2026-05-11
A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation results in denial of service. The at…
CVE-2026-8289MEDIUMCVSS 4.3EG 4.3
2026-05-11
A vulnerability was identified in Open5GS up to 2.7.7. This vulnerability affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation of the argument qosFlowProfile le…
CVE-2026-8288MEDIUMCVSS 4.3EG 4.3
2026-05-11
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsm_handle_pdu_session_modification_qos_flow_descriptions of the file src/smf/gsm-handler.c of the component SMF. Executing a manipulation of the argument n1S…
CVE-2026-8270MEDIUMCVSS 4.3EG 4.3
2026-05-11
A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_nas_parse_qos_rules of the component SMF. Executing a manipulation can lead to denial of service. The attack can be executed remotely. The expl…
CVE-2026-8269MEDIUMCVSS 4.3EG 4.3
2026-05-11
A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function smf_nsmf_handle_create_sm_context of the component SMF. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The e…
CVE-2026-8123MEDIUMCVSS 4.3EG 4.3
2026-05-08
A vulnerability was determined in Open5GS up to 2.7.7. This impacts the function ogs_sbi_discovery_option_add_snssais in the library /lib/sbi/message.c of the component NSSF. This manipulation causes denial of service. It is possible to in…
CVE-2026-8122MEDIUMCVSS 4.3EG 4.3
2026-05-08
A vulnerability was found in Open5GS up to 2.7.7. This affects the function ogs_sbi_discovery_option_add_service_names in the library /lib/sbi/message.c of the component NSSF. The manipulation results in denial of service. The attack may b…
CVE-2026-8121MEDIUMCVSS 4.3EG 4.3
2026-05-08
A vulnerability has been found in Open5GS up to 2.7.7. The impacted element is the function ogs_sbi_parse_plmn_list in the library /lib/sbi/conv.c of the component NSSF. The manipulation leads to denial of service. The attack is possible t…
CVE-2026-8120MEDIUMCVSS 4.3EG 4.3
2026-05-08
A flaw has been found in Open5GS up to 2.7.7. The affected element is the function nssf_nnrf_nsselection_handle_get_from_amf_or_vnssf of the file /src/nssf/nnssf-handler.c of the component NSSF. Executing a manipulation can lead to denial …
CVE-2026-7781MEDIUMCVSS 4.3EG 4.3
2026-05-04
A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the function udm_nudm_uecm_handle_amf_registration_update of the file /src/udm/nudm-handler.c of the component amf-3gpp-access Endpoint. The manip…
CVE-2026-7780MEDIUMCVSS 4.3EG 4.3
2026-05-04
A weakness has been identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function udm_state_operational of the file /src/udm/udm-sm.c of the component smf-registrations Endpoint. Executing a manipulation can lead to den…
CVE-2026-7779MEDIUMCVSS 4.3EG 4.3
2026-05-04
A security flaw has been discovered in Open5GS up to 2.7.7. Affected is the function udm_nudr_dr_handle_subscription_authentication of the file /src/udm/nudr-handler.c of the component authentication-subscription Endpoint. Performing a man…
CVE-2026-7708MEDIUMCVSS 4.3EG 4.3
2026-05-03
A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_dbi_subscription_data in the library /lib/dbi/subscription.c of the component UDR. This manipulation of the argument supi_id causes denial of s…
CVE-2026-7707MEDIUMCVSS 4.3EG 4.3
2026-05-03
A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the argument pei results in denial of service.…
CVE-2026-7706MEDIUMCVSS 4.3EG 4.3
2026-05-03
A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function gmm_handle_service_request of the file /src/amf/gmm-handler.c of the component AMF. The manipulation leads to denial of service. The attack can be initi…
CVE-2026-7701MEDIUMCVSS 4.3EG 4.3
2026-05-03
A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/url_auth_box.cpp of the component Bot API. The manipulation of the arg…
CVE-2026-7601MEDIUMCVSS 4.3EG 4.3
2026-05-02
A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_type leads to denial of service. The attack is possible to …
CVE-2026-7587MEDIUMCVSS 4.3EG 4.3
2026-05-01
A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handle_update_sm_context of the file /src/amf/nsmf-handler.c of the component AMF. The manipulation leads to denial of servi…
CVE-2026-7586MEDIUMCVSS 4.3EG 4.3
2026-05-01
A weakness has been identified in Open5GS up to 2.7.7. Affected is the function ogs_id_get_value of the file /src/amf/nudm-handler.c of the component AMF. This manipulation causes denial of service. Remote exploitation of the attack is pos…
CVE-2026-7585MEDIUMCVSS 4.3EG 4.3
2026-05-01
A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manipulation can lead to denial of service. T…
CVE-2026-7583MEDIUMCVSS 4.3EG 4.3
2026-05-01
A flaw has been found in Open5GS up to 2.7.7. This issue affects the function bsf_sess_find_by_ipv6prefix of the file /src/bsf/context.c of the component BSF. This manipulation of the argument ipv6Prefix causes denial of service. It is pos…
CVE-2026-7535MEDIUMCVSS 4.3EG 4.3
2026-05-01
A vulnerability was found in Open5GS up to 2.7.7. This affects the function amf_namf_comm_handle_registration_status_update_request in the library /lib/app/ogs-init.c of the file /namf-comm/v1/ue-contexts/{ueContextId}/transfer-update. Per…
CVE-2026-7518MEDIUMCVSS 4.3EG 4.3
2026-05-01
A flaw has been found in Open5GS up to 2.7.7. This issue affects the function amf_namf_callback_handle_sdm_data_change_notify of the file /namf-callback/v1/{id}/sdmsubscription-notify of the component AMF SBI Endpoint. This manipulation of…
CVE-2026-6797MEDIUMCVSS 4.3EG 4.3
2026-04-21
A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vulnerability is the function ZipSecureFile.setMinflateRatio of the file common/src/main/java/com/publiccms/common/tools/DocToHtmlUtils.java. Such manip…
CVE-2026-6601MEDIUMCVSS 4.3EG 4.3
2026-04-20
A vulnerability has been found in Lagom WHMCS Template up to 2.4.2. This impacts an unknown function of the component Datatables. The manipulation leads to resource consumption. Remote exploitation of the attack is possible. The exploit ha…
CVE-2026-5313MEDIUMCVSS 4.3EG 4.3
2026-04-01
A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbi__gif_load_next in the library stb_image.h of the component GIF Decoder. Such manipulation leads to denial of service. The attack may be launche…
CVE-2025-15156MEDIUMCVSS 4.3EG 4.3
2025-12-28
A flaw has been found in omec-project UPF up to 2.1.3-dev. This affects the function handleSessionEstablishmentRequest of the file /pfcpiface/pfcpiface/messages_session.go of the component PFCP Session Establishment Request Handler. This m…
CVE-2025-14105MEDIUMCVSS 4.3EG 4.3
2025-12-05
A vulnerability was determined in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. This impacts an unknown function of the file /reqproc/proc_post of the component Web Interface. Executing manipulation of the argument goformId with the input …
CVE-2025-12917MEDIUMCVSS 4.3EG 4.3
2025-11-09
A vulnerability was identified in TOZED ZLT T10 T10PLUS_3.04.15. The affected element is an unknown function of the file /reqproc/proc_post of the component Reboot Handler. Such manipulation leads to denial of service. Access to the local …
CVE-2025-7462MEDIUMCVSS 4.3EG 4.3
2025-07-12
A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdf_ferror of the file devices/vector/gdevpdf.c of the component New Output File…
CVE-2025-3535MEDIUMCVSS 4.3EG 4.3
2025-04-13
A vulnerability has been found in shuanx BurpAPIFinder up to 2.0.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file BurpApiFinder.db. The manipulation leads to denial of service. The att…
CVE-2025-3016MEDIUMCVSS 4.3EG 4.3
2025-03-31
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the co…
CVE-2025-2591MEDIUMCVSS 4.3EG 4.3
2025-03-21
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadFile_Quake1 of the file code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the …
CVE-2025-1893MEDIUMCVSS 4.3EG 4.3
2025-03-04
A vulnerability was found in Open5GS up to 2.7.2. It has been declared as problematic. Affected by this vulnerability is the function gmm_state_authentication of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to den…
CVE-2025-1816MEDIUMCVSS 4.3EG 4.3
2025-03-02
A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audio_element_obu of the file libavformat/iamf_parse.c of the component IAMF File Handler. The man…
CVE-2023-51332MEDIUMCVSS 4.3EG 4.3
2025-02-20
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large …
CVE-2025-24160MEDIUMCVSS 4.3EG 4.3
2025-01-27
The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to an unexpected app term…
CVE-2024-12002MEDIUMCVSS 4.3EG 4.3
2024-11-30
A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Conten…
CVE-2018-25098MEDIUMCVSS 4.3EG 4.3
2024-02-04
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in blockmason credit-protocol. It has been declared as problematic. Affected by this vulnerability is the function executeUcacTx of the file contracts/CreditProtocol.sol of the comp…
CVE-2024-0695MEDIUMCVSS 4.3EG 4.3
2024-01-18
A vulnerability, which was classified as problematic, has been found in EFS Easy Chat Server 3.1. Affected by this issue is some unknown functionality of the component HTTP GET Request Handler. The manipulation of the argument USERNAME lea…

Map vulnerabilities like CWE-404 to your infrastructure

EchelonGraph correlates every CVE — across CWE-404 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →