CVE-2026-8250Disclosure(open5gs / open5gs)

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in Open5GS up to 2.7.7. This affects the function smf_n4_build_qos_flow_to_modify_list of the file /src/smf/n4-build.c of the component SMF. Such manipulation leads to denial of service. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-404

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • open5gs

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-05-11)
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
open5gs

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-10: 1Mentions · 2026-05-11: 2Technical Details · 2026-05-10: 1Technical Details · 2026-05-11: 205-1005-11
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-101
Disclosure1
2026-05-112
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-8250 A vulnerability has been found in Open5GS up to 2.7.7. This affects the function smf_n4_build_qos_flow_to_modify_list of the file /src/smf/n4-build.c of the component S… https://www.cve.org/CVERecord?id=CVE-2026-8250 ----- Traducción: CVE-2026-8250 Se … http://infoflow.cloud`

    Post summary

    The post announces a newly disclosed CVE-2026-8250 affecting Open5GS, providing technical details but no PoC, exploit, active exploitation, patch, or false positive information.

    0000075
    77 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8250 A vulnerability has been found in Open5GS up to 2.7.7. This affects the function smf_n4_build_qos_flow_to_modify_list of the file /src/smf/n4-build.c of the component S… https://www.cve.org/CVERecord?id=CVE-2026-8250

    Post summary

    The notice announces CVE‑2026‑8250 in Open5GS, indicating the vulnerable function and file, but provides no PoC, exploit, or patch information.

    00000316
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8250 Denial of Service Vulnerability in Open5GS SMF Component Up to 2.7.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8250

    Post summary

    The text announces a denial‑of‑service vulnerability (CVE‑2026‑8250) affecting the Open5GS SMF component up to version 2.7.7 and provides a link to the vulnerability details.

    0000043
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopen5gsopen5gs---

Explore more