CVE-2026-8248
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A vulnerability was detected in Open5GS up to version 2.7.7 in the function update_authorized_pcc_rule_and_qos in the SMF component. Manipulation leads to denial of service. The attack can be launched remotely, and the exploit is publicly available.
Risk Assessment
The risk includes remote denial of service, potentially disrupting 5G network operations.
Recommendation
It is recommended to immediately update Open5GS to a patched version or apply temporary network mitigations.
Original NVD description (English source)
A vulnerability was detected in Open5GS up to 2.7.7. The affected element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.