CVE-2026-7708Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_dbi_subscription_data in the library /lib/dbi/subscription.c of the component UDR. This manipulation of the argument supi_id causes denial of service. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-404

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-05-03: 3Technical Details · 2026-05-03: 305-03
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-7708 A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_dbi_subscription_data in the library /lib/dbi/subscription.c of the comp… https://www.cve.org/CVERecord?id=CVE-2026-7708

    Post summary

    A vulnerability within Open5GS up to version 2.7.7 targeting the ogs_dbi_subscription_data function has been identified, with technical details disclosed and available via the CVE record.

    00010235
    57.4K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7708 Denial of Service in Open5GS UDR via SUPI_ID Manipulation Up to 2.7.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7708

    Post summary

    The text announces CVE-2026-7708, a Denial of Service flaw in Open5GS UDR up to version 2.7.7 caused by SUPI_ID manipulation, without providing PoC, exploit code, or patch details.

    0000036
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-7708 A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogs_dbi_subscription_data in the library /lib/dbi/subscription.c of the comp… https://www.cve.org/CVERecord?id=CVE-2026-7708 ----- Traducción: CVE-2026-7708 Se … http://infoflow.cloud`

    Post summary

    The message announces CVE-2026-7708 affecting Open5GS up to version 2.7.7, detailing the vulnerable function but offering no PoC, exploit, or mitigation information.

    0000021
    75 followersView on X

Explore more