CVE-2026-78157

High

Description

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named c18dc6938bf63cc7374315d3dca303d92066e746. To fix this issue, it is recommended to deploy a patch.

SeverityHigh

CVSS7.4

Exploit probability—

ProductOpen5gs

PublishedAug 24, 2026

First seenAug 24, 2026

Weakness typeCWE-125Out-of-bounds read CWE-119Memory buffer bounds error

How to fix

Patches

github.com/open5gs/open5gs/commit/c18dc6938bf63cc7374315d3dca303d92066e746

Affected products

Product	Affected versions	Fixed in
open5gs open5gs	2.8.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.