Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Open5GS up to 2.7.7. This affects the function gsm_build_pdu_session_establishment_accept of the file /src/smf/gsm-build.c of the component SMF. The manipulation results in denial of service. The attack can be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🛑 Open5GS up to 2.7.7 has a remotely exploitable denial-of-service issue in SMF, affecting gsm_build_pdu_session_establishment_accept. #CVE #Open5GS #DoS #CyberSecurity https://nvd.nist.gov/vuln/detail/CVE-2026-8266
Post summary
The post announces the discovery of a denial-of-service vulnerability (CVE‑2026‑8266) in Open5GS SMF, providing basic technical details but no PoC, exploit code, or patch information.
CVE-2026-8266 A vulnerability was detected in Open5GS up to 2.7.7. This affects the function gsm_build_pdu_session_establishment_accept of the file /src/smf/gsm-build.c of the compon… https://www.cve.org/CVERecord?id=CVE-2026-8266
Post summary
CVE-2026-8266 was identified in Open5GS up to version 2.7.7, affecting a specific function, but the entry provides no evidence of exploitation, PoC, or remediation.
CVE-2026-8266 Denial of Service in Open5GS SMF up to 2.7.7 via PDU Session Establishment https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8266
Post summary
The post provides a straightforward disclosure of a Denial of Service vulnerability in Open5GS SMF versions up to 2.7.7, without mentioning PoC code, active exploitation, or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open5gs | open5gs | - | - | - |