CVE-2026-8226
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A vulnerability was discovered in Open5GS up to version 2.7.7 in the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. Manipulation leads to denial of service. The attack can be launched remotely. The exploit is publicly available.
Risk Assessment
An attacker can remotely cause a denial of service, potentially disrupting 5G network operations using Open5GS.
Recommendation
Upgrade Open5GS to a patched version or apply temporary network restrictions to block access to the vulnerable endpoint.
Original NVD description (English source)
A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.