CVE-2026-8224
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
In Open5GS up to version 2.7.7, a vulnerability exists in the function pcf_sess_set_ipv6prefix in file /src/pcf/context.c of the PCF component. Manipulation of the argument SmPolicyContextData.ipv6AddressPrefix can lead to denial of service (DoS). The attack can be launched remotely, and the exploit has been publicly disclosed.
Risk Assessment
An attacker can remotely cause the PCF service to crash, leading to disruption of 5G network operations.
Recommendation
Update Open5GS to a version above 2.7.7 once the vendor provides a fix, or apply temporary network mitigations.
Original NVD description (English source)
A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function pcf_sess_set_ipv6prefix of the file /src/pcf/context.c of the component PCF. Executing a manipulation of the argument SmPolicyContextData.ipv6AddressPrefix can lead to denial of service. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.