Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to resource consumption. The attack may be performed from remote. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-09 | 3 | Disclosure2General1 |
| 2026-05-11 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2026-8187 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-8187 #CVE-2026-8187 #CVE #Medium #CyberSecurity #InfoSec https://t.co/oL36aws2AQ
Post summary
The tweet announces the new CVE‑2026‑8187 with a medium severity rating (CVSS 5.3) but provides no evidence of exploitation, patch, or PoC details.
📉 Open5GS (≤ 2.7.7) vulnerable to remote resource exhaustion in UPF component via crafted GTP traffic. #CVE #5G #DoS https://nvd.nist.gov/vuln/detail/CVE-2026-8187
Post summary
Open5GS versions ≤2.7.7 are vulnerable to remote resource exhaustion in the UPF component through crafted GTP traffic, potentially resulting in a denial‑of‑service.
CVE-2026-8187 A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation c… https://www.cve.org/CVERecord?id=CVE-2026-8187
Post summary
A flaw in Open5GS up to version 2.7.7 is disclosed, affecting the _gtpv1_u_recv_cb function in src/upf/gtp-path.c, without providing PoC, exploit code, patch information, or evidence of active exploitation.
CVE-2026-8187 Resource Consumption Vulnerability in Open5GS UPF Up to Version 2.7.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8187
Post summary
The content merely announces a CVE with minimal details, lacking PoC, exploit, patch, or active usage information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open5gs | open5gs | - | - | - |