CVE-2026-8744

Medium

Description

A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function ogs_sbi_subscription_data_add/ogs_sbi_nf_service_add in the library /lib/sbi/context.c of the component NRF. Executing a manipulation can lead to denial of service. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 819db11a08b9736a3576c4f99ceb28f7eb99523a. A patch should be applied to remediate this issue.

SeverityMedium

CVSS4.3

Exploit probability—

ProductOpen5gs

PublishedMay 17, 2026

First seenMay 17, 2026

Weakness typeCWE-404CWE-404

How to fix

Patches

github.com/open5gs/open5gs/pull/4534
github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a

Affected products

Product	Affected versions	Fixed in
open5gs open5gs	v ≤ 2.7.7	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.