CVE-2026-8288 - Vulnerability Analysis

Overview

Open5GS <= 2.7.7 contains a denial of service caused by manipulation of the argument n1SmMsg in gsm_handle_pdu_session_modification_qos_flow_descriptions of SMF component, letting remote attackers cause service disruption, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can cause denial of service, disrupting availability of the affected system.

Mitigation

Update to a fixed version once the pull request is accepted or upgrade to the latest available version.

References

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/issues/4452
• https://github.com/open5gs/open5gs/pull/4513
• https://vuldb.com/submit/808489
• https://vuldb.com/vuln/362585
• https://vuldb.com/vuln/362585/cti

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner