CVE-2026-8266 - Vulnerability Analysis

Overview

Open5GS <= 2.7.7 contains a denial of service caused by manipulation in gsm_build_pdu_session_establishment_accept function in SMF component, letting remote attackers cause service disruption, exploit requires no special conditions.

Severity & Score

Impact

Remote attackers can cause denial of service, disrupting availability of the affected system.

Mitigation

Update to the latest version of Open5GS.

References

• https://vuldb.com/vuln/362563/cti
• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/issues/4447
• https://vuldb.com/submit/808483
• https://vuldb.com/vuln/362563

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner