CVE-2026-8252 - Vulnerability Analysis

Overview

Open5GS <= 2.7.7 contains a null pointer dereference caused by manipulation in smf_nsmf_handle_create_data_in_hsmf function of SMF component, letting remote attackers cause denial of service, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can cause denial of service by triggering a null pointer dereference, potentially crashing the system.

Mitigation

Update to the latest version beyond 2.7.7.

References

• https://vuldb.com/vuln/362549/cti
• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/issues/4446
• https://vuldb.com/submit/808482
• https://vuldb.com/vuln/362549

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner