CVE-2026-7708: Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service
A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the function ogsdbisubscriptiondata in the library /lib/dbi/subscription.c of the component UDR. This manipulation of the argument supiid causes denial of service. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7708?
CVE-2026-7708 is classified as a denial of service vulnerability affecting Open5GS UDR versions up to 2.7.7.
How do I fix CVE-2026-7708?
To mitigate CVE-2026-7708, upgrade Open5GS UDR to version 2.7.8 or later.
What software is affected by CVE-2026-7708?
CVE-2026-7708 affects Open5GS UDR versions up to and including 2.7.7.
What is the impact of CVE-2026-7708?
The impact of CVE-2026-7708 is the potential for a denial of service condition in Open5GS UDR.
When was CVE-2026-7708 discovered?
CVE-2026-7708 was reported in 2026.