Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function pcf_sess_set_ipv6prefix of the file /src/pcf/context.c of the component PCF. Executing a manipulation of the argument SmPolicyContextData.ipv6AddressPrefix can lead to denial of service. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-8224 A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function pcf_sess_set_ipv6prefix of the file /src/pcf/context.c of the component PC… https://www.cve.org/CVERecord?id=CVE-2026-8224
Post summary
A new CVE (CVE-2026-8224) for Open5GS has been announced, providing limited technical context but no exploitation, patch, or PoC information.
CVE-2026-8224 Denial of Service in Open5GS PCF via IPv6 Address Prefix Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8224
Post summary
CVE-2026-8224 details a Denial of Service in Open5GS PCF caused by IPv6 address prefix manipulation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open5gs | open5gs | - | - | - |