CVE-2026-8121: Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of service
A vulnerability has been found in Open5GS up to 2.7.7. The impacted element is the function ogssbiparseplmnlist in the library /lib/sbi/conv.c of the component NSSF. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8121?
CVE-2026-8121 is categorized as a denial of service vulnerability, impacting the availability of Open5GS NSSF.
How does CVE-2026-8121 affect Open5GS NSSF?
CVE-2026-8121 affects the function ogs_sbi_parse_plmn_list in Open5GS NSSF, leading to potential service disruptions.
What versions of Open5GS NSSF are affected by CVE-2026-8121?
CVE-2026-8121 impacts Open5GS NSSF versions up to and including 2.7.7.
How do I fix CVE-2026-8121?
To mitigate CVE-2026-8121, users should upgrade to the latest version of Open5GS NSSF that addresses the vulnerability.
Can CVE-2026-8121 be exploited remotely?
Yes, CVE-2026-8121 can be exploited remotely, enabling attackers to cause a denial of service in the affected systems.