VulnerabilityAnalyzed

CVE-2026-8291

A weakness has been identified in Open5GS up to 2.7.7.

LOW 2.1EPSS 0.38%

Does this matter?

Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.

Description

A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogs_nnrf_nfm_handle_nf_profile of the file lib/sbi/nnrf-handler.c of the component NRF. This manipulation causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.

CVSS 4.0: 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.38% probability · 31th percentile
CISA KEV: Not listed
Weakness: CWE-404
Affected: open5gs/open5gs
Source: cna@vuldb.com

References

https://github.com/open5gs/open5gs/Product
https://github.com/open5gs/open5gs/issues/4456Exploit, Issue Tracking
https://github.com/open5gs/open5gs/pull/4534Exploit, Issue Tracking, Patch
https://vuldb.com/submit/808508Third Party Advisory, VDB Entry
https://vuldb.com/vuln/362588Third Party Advisory, VDB Entry
https://vuldb.com/vuln/362588/ctiPermissions Required, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.