CVE-2026-8251 - Vulnerability Analysis

Overview

Open5GS <= 2.7.7 contains a denial of service caused by manipulation in update_authorized_pcc_rule_and_qos function in SMF component, letting remote attackers cause service disruption, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause denial of service, disrupting availability of the affected system.

Mitigation

Update to the latest version.

References

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/issues/4445
• https://vuldb.com/submit/808480
• https://vuldb.com/vuln/362548
• https://vuldb.com/vuln/362548/cti

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner