CVE-2026-8248

Description

A vulnerability was detected in Open5GS up to 2.7.7. The affected element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

References

https://vuldb.com/vuln/362545/cti

https://vuldb.com/vuln/362545

https://vuldb.com/submit/808472

https://github.com/open5gs/open5gs/issues/4442

https://github.com/open5gs/open5gs/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4