CVE-2026-82548

Linux Foundation Magma InitialUEMessage information disclosure

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected

Linux Foundation · Magma

CVSS v4.0 VULDB

5.5 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 VULDB

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0 VULDB

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.53% chance of exploitation in the next 30 days, 44th percentile

Published

2026-08-30

Proof-of-concept exploits (1)

• magma/magma/issues/160221858★ · 2026-07-11

References

• CVE Record
• NVD entry

Related

• CVE-2026-82547
• CVE-2026-82549
• CVE-2026-82550
• CVE-2026-82551
• CVE-2026-82552