CVE-2026-8251
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
In Open5GS up to version 2.7.7, a vulnerability in the update_authorized_pcc_rule_and_qos function of the SMF component allows manipulation leading to denial of service (DoS). The attack can be launched remotely, and the exploit is publicly available.
Risk Assessment
The organization is at risk of remote disruption of 5G network services, potentially affecting communication and system availability.
Recommendation
Update Open5GS to the latest version or apply temporary network mitigations to block access to the vulnerable endpoint.
Original NVD description (English source)
A vulnerability was found in Open5GS up to 2.7.7. This impacts the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.