Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsm_handle_pdu_session_modification_qos_flow_descriptions of the file src/smf/gsm-handler.c of the component SMF. Executing a manipulation of the argument n1SmMsg can lead to denial of service. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-8288 A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsm_handle_pdu_session_modification_qos_flow_descriptions of the file src/smf/gsm-handl… https://www.cve.org/CVERecord?id=CVE-2026-8288
Post summary
The text announces CVE-2026-8288 affecting Open5GS, detailing the specific function and file path impacted, but provides no information on exploits, patches, or active misuse.
CVE-2026-8288 Denial of Service in Open5GS SMF via N1SmMsg Manipulation Up to 2.... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8288 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces CVE-2026-8288, a DoS vulnerability in Open5GS SMF caused by N1SmMsg manipulation, providing links to vulnerability details but no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open5gs | open5gs | - | - | - |