CVE-2026-7183

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7183", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-27T09:56:05.895Z", "datePublished": "2026-04-27T22:30:15.208Z", "dateUpdated": "2026-04-28T15:15:00.680Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-27T22:30:15.208Z"}, "title": "aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-248", "lang": "en", "description": "Uncaught Exception"}]}], "affected": [{"vendor": "aligungr", "product": "UERANSIM", "versions": [{"version": "3.2.0", "status": "affected"}, {"version": "3.2.1", "status": "affected"}, {"version": "3.2.2", "status": "affected"}, {"version": "3.2.3", "status": "affected"}, {"version": "3.2.4", "status": "affected"}, {"version": "3.2.5", "status": "affected"}, {"version": "3.2.6", "status": "affected"}, {"version": "3.2.7", "status": "affected"}, {"version": "3.2.8", "status": "unaffected"}], "modules": ["Radio Link Simulation Layer"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception. The attack may be initiated remotely. Upgrading to version 3.2.8 is sufficient to fix this issue. The identifier of the patch is ca1a66fffe282767bb08618af9f848e3b68ea47b. It is suggested to upgrade the affected component. This behavior is related to CVE-2024-37877. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-04-27T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-27T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-27T12:01:54.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "0wln3d (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/359784", "name": "VDB-359784 | aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359784/cti", "name": "VDB-359784 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/800026", "name": "Submit #800026 | UERANSIM 3.2.7 DoS via Malformed RLS Packet (CWE-248)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/aligungr/UERANSIM/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b", "tags": ["patch"]}, {"url": "https://github.com/aligungr/UERANSIM/releases/tag/v3.2.8", "tags": ["patch"]}, {"url": "https://github.com/aligungr/UERANSIM/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-28T15:14:42.345804Z", "id": "CVE-2026-7183", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-28T15:15:00.680Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7183", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-28T15:14:42.345804Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-28T14:56:43.131Z"}}], "cna": {"tags": ["x_open-source"], "title": "aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception", "credits": [{"lang": "en", "type": "reporter", "value": "0wln3d (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"vendor": "aligungr", "modules": ["Radio Link Simulation Layer"], "product": "UERANSIM", "versions": [{"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.2.1"}, {"status": "affected", "version": "3.2.2"}, {"status": "affected", "version": "3.2.3"}, {"status": "affected", "version": "3.2.4"}, {"status": "affected", "version": "3.2.5"}, {"status": "affected", "version": "3.2.6"}, {"status": "affected", "version": "3.2.7"}, {"status": "unaffected", "version": "3.2.8"}]}], "timeline": [{"lang": "en", "time": "2026-04-27T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-27T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-27T12:01:54.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/359784", "name": "VDB-359784 | aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359784/cti", "name": "VDB-359784 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/800026", "name": "Submit #800026 | UERANSIM 3.2.7 DoS via Malformed RLS Packet (CWE-248)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/aligungr/UERANSIM/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b", "tags": ["patch"]}, {"url": "https://github.com/aligungr/UERANSIM/releases/tag/v3.2.8", "tags": ["patch"]}, {"url": "https://github.com/aligungr/UERANSIM/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception. The attack may be initiated remotely. Upgrading to version 3.2.8 is sufficient to fix this issue. The identifier of the patch is ca1a66fffe282767bb08618af9f848e3b68ea47b. It is suggested to upgrade the affected component. This behavior is related to CVE-2024-37877. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-248", "description": "Uncaught Exception"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-27T22:30:15.208Z"}}}, "cveMetadata": {"cveId": "CVE-2026-7183", "state": "PUBLISHED", "dateUpdated": "2026-04-28T15:15:00.680Z", "dateReserved": "2026-04-27T09:56:05.895Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-27T22:30:15.208Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["Radio Link Simulation Layer"], "product": "UERANSIM", "vendor": "aligungr", "versions": [{"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.2.1"}, {"status": "affected", "version": "3.2.2"}, {"status": "affected", "version": "3.2.3"}, {"status": "affected", "version": "3.2.4"}, {"status": "affected", "version": "3.2.5"}, {"status": "affected", "version": "3.2.6"}, {"status": "affected", "version": "3.2.7"}, {"status": "unaffected", "version": "3.2.8"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception. The attack may be initiated remotely. Upgrading to version 3.2.8 is sufficient to fix this issue. The identifier of the patch is ca1a66fffe282767bb08618af9f848e3b68ea47b. It is suggested to upgrade the affected component. This behavior is related to CVE-2024-37877. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."}, {"lang": "es", "value": "Una vulnerabilidad ha sido encontrada en aligungr UERANSIM hasta 3.2.7. El elemento afectado es la funci\u00f3n rls::DecodeRlsMessage en la biblioteca src/lib/rls/rls_pdu.cpp del componente Radio Link Simulation Layer. La manipulaci\u00f3n del argumento pduLength conduce a una excepci\u00f3n no capturada. El ataque puede ser iniciado remotamente. La actualizaci\u00f3n a la versi\u00f3n 3.2.8 es suficiente para solucionar este problema. El identificador del parche es ca1a66fffe282767bb08618af9f848e3b68ea47b. Se sugiere actualizar el componente afectado. Este comportamiento est\u00e1 relacionado con CVE-2024-37877. El proveedor fue contactado con antelaci\u00f3n, respondi\u00f3 de manera muy profesional y r\u00e1pidamente lanz\u00f3 una versi\u00f3n corregida del producto afectado."}], "id": "CVE-2026-7183", "lastModified": "2026-07-24T08:10:00.150", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7183", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-28T15:14:42.345804Z", "version": "2.0.3"}}]}, "published": "2026-04-27T23:16:03.857", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/aligungr/UERANSIM/"}, {"source": "cna@vuldb.com", "url": "https://github.com/aligungr/UERANSIM/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b"}, {"source": "cna@vuldb.com", "url": "https://github.com/aligungr/UERANSIM/releases/tag/v3.2.8"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/800026"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359784"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359784/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-248"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.2.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "3.2.8"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "UERANSIM", "source": "cna", "vendor": "aligungr"}, "product": "ueransim", "vendor": "aligungr"}], "analysis": {"en": {"generated_at": "2026-04-28T12:47:50.621289+00:00", "value": {"mitigation_remediation": ["Upgrade UERANSIM to version 3.2.8 or later, following the vendor\u2019s release instructions.", "Rebuild and redeploy your simulator installations to run the updated binaries.", "If an update is not immediately possible, isolate the UERANSIM host from untrusted networks or disable the Radio Link Simulation Layer until the fix can be applied."], "summary": {"action": "Apply Patch", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "Vendor aligungr provides UERANSIM, a software suite used for 5G radio network simulation. All releases up to and including 3.2.7 are affected. Version 3.2.8 and later contain the fix, as identified by commit ca1a66fffe282767bb08618af9f848e3b68ea47b. By updating to 3.2.8 you eliminate the code path that can trigger the uncaught exception.", "description_and_impact": "The vulnerability is located in the rls::DecodeRlsMessage function of UERANSIM\u2019s Radio Link Simulation Layer. Manipulating the pduLength argument causes the function to throw an uncaught exception, which terminates the process. Rather than enabling arbitrary code execution, the flaw can be used to crash the service. Because the trigger can be supplied remotely, an attacker can interrupt or disrupt network functions that rely on the simulator. The weakness is an Uncaught Exception (CWE\u2011248), which effectively provides a Denial\u2011of\u2011Service impact.", "risk_and_exploitability": "The CVSS score of 6.9 places the issue in the moderate severity range. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog, so large\u2011scale exploitation is not currently documented. However, because the flaw is remotely exploitable and can crash the simulator, organizations running UERANSIM for testing and training should consider patching immediately to avoid service disruption."}}}}, "created": "2026-04-28T09:16:47.556943+00:00", "updated": "2026-04-28T13:00:15.223427+00:00", "vendors": ["aligungr", "aligungr$PRODUCT$ueransim"]}