CVE-2026-8270 - Vulnerability Analysis

Overview

Open5GS <= 2.7.7 contains a denial of service vulnerability caused by manipulation in the ogs_nas_parse_qos_rules function of the SMF component, letting remote attackers cause service disruption, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can cause denial of service, disrupting service availability.

Mitigation

Update to the latest version of Open5GS.

References

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/issues/4451
• https://vuldb.com/submit/808488
• https://vuldb.com/vuln/362567
• https://vuldb.com/vuln/362567/cti

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner