A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogs_sbi_nf_instance_set_id in the library /lib/sbi/context.c of the component NRF. Executing a manipulation of the argument nfInstanceId can lead to denial of service. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was detected in Open5GS up to 2.7.7. This affects an unknown function in the library /lib/sbi/message.c of the component NRF. Performing a manipulation of the argument service-names/snssais results in denial of service. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-8728 is a medium severity denial of service vulnerability in Open5GS versions up to 2.7.7. It affects the NRF component, specifically the function ogs_sbi_discovery_option_parse_plmn_list in the /lib/sbi/conv.c library. The vulnerability arises from manipulation of the target-plmn-list argument, which can be exploited remotely to cause a denial of service. The issue has been publicly disclosed and the project has not yet responded with a fix or mitigation guidance.
A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarel_parse in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argument hnrf-uri leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogs_nnrf_nfm_handle_nf_profile of the file lib/sbi/nnrf-handler.c of the component NRF. This manipulation causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-8289 is a medium severity denial of service vulnerability in Open5GS versions up to 2.7.7. It affects the SMF component, specifically the function smf_nsmf_handle_update_data_in_vsmf, where manipulation of the qosFlowProfile argument can cause a denial of service. Remote exploitation is possible, and a public exploit exists. The Open5GS project has been informed but has not yet responded or provided a fix.
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsm_handle_pdu_session_modification_qos_flow_descriptions of the file src/smf/gsm-handler.c of the component SMF. Executing a manipulation of the argument n1SmMsg can lead to denial of service. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.
CVE-2026-8270 is a medium severity vulnerability in Open5GS versions up to 2.7.7 affecting the SMF component's ogs_nas_parse_qos_rules function. A remote attacker can manipulate inputs to cause a denial of service condition. The vulnerability has been publicly disclosed, but no official patch or remediation has been provided by the vendor yet. Exploits are not known to be observed in the wild at this time.
CVE-2026-8269 is a medium severity vulnerability in Open5GS versions up to 2.7.7 affecting the SMF component's smf_nsmf_handle_create_sm_context function. It allows remote denial of service through crafted manipulation. The vulnerability is publicly known and exploitable remotely. No official patch or remediation has been provided by the project as of the publication date.
CVE-2026-8268 is a medium severity vulnerability in Open5GS versions up to 2.7.7 affecting the SMF component's OpenAPI_list_create function. This flaw allows remote attackers to cause a denial of service. The vulnerability has been publicly disclosed, but no official patch or remediation guidance has been provided by the project as of the publication date.
CVE-2026-8267 is a medium-severity vulnerability in Open5GS versions up to 2.7.7 affecting the SMF component. It involves a flaw in the smf_nsmf_handle_created_data_in_vsmf function that can be remotely exploited to cause a denial of service. The vulnerability was reported early, but the Open5GS project has not yet responded or issued a fix. Exploit code is publicly available, but no known exploits in the wild have been reported.
CVE-2026-8266 is a medium severity denial of service vulnerability in Open5GS versions up to 2.7.7. It affects the SMF component, specifically the gsm_build_pdu_session_establishment_accept function in the gsm-build.c file. The vulnerability can be exploited remotely without user interaction or privileges. Although the exploit is publicly available, the Open5GS project has not yet responded or issued a fix. No official patch or mitigation guidance is currently confirmed.
CVE-2026-8252 is a medium severity vulnerability in Open5GS versions up to 2.7.7. It involves a null pointer dereference in the SMF component's function smf_nsmf_handle_create_data_in_hsmf. The vulnerability can be triggered remotely without user interaction or elevated privileges. Although the issue was reported early, the Open5GS project has not yet responded or provided a fix. There are no known exploits in the wild at this time.
CVE-2026-8251 is a medium severity vulnerability in Open5GS versions up to 2.7.7 affecting the SMF component's function update_authorized_pcc_rule_and_qos. This flaw allows a remote attacker to cause a denial of service by manipulating this function. The vulnerability has a CVSS 4.0 base score of 5.3 and an exploit has been publicly disclosed. The Open5GS project has been informed but has not yet responded or issued a patch. No official remediation or patch is currently available.
CVE-2026-8250 is a medium severity vulnerability in Open5GS versions up to 2.7.7 affecting the SMF component. It arises from a flaw in the function smf_n4_build_qos_flow_to_modify_list, which can be remotely exploited to cause a denial of service. The vulnerability has been publicly disclosed, but no official patch or remediation has been provided by the project as of the publication date. The attack requires no user interaction and has low complexity, but some privileges are needed to execute it.
CVE-2026-8249 is a medium severity vulnerability in Open5GS versions up to 2.7.7 affecting the SMF component. The flaw exists in the function update_authorized_pcc_rule_and_qos within /src/smf/npcf-handler.c and can be remotely exploited to cause a denial of service. Although an exploit has been published, there is no vendor response or official patch available yet. The vulnerability requires low privileges to exploit and does not require user interaction.
CVE-2026-8248 is a medium severity denial of service vulnerability in Open5GS versions up to 2.7.7. It affects the SMF component, specifically the function update_authorized_pcc_rule_and_qos in the file /src/smf/npcf-handler.c. The vulnerability can be exploited remotely without user interaction or privileges. Although the issue was reported early to the project, no response or fix has been provided yet. The exploit code is publicly available, increasing the risk of exploitation.
A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was identified in Open5GS up to 2.7.7. This affects the function pcf_npcf_smpolicycontrol_handle_delete of the file src/pcf/sm-sm.c of the component delete Endpoint. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.