CVE-2026-8122: Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_names denial of service
A vulnerability was found in Open5GS up to 2.7.7. This affects the function ogssbidiscoveryoptionaddservicenames in the library /lib/sbi/message.c of the component NSSF. The manipulation results in denial of service. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8122?
CVE-2026-8122 has a critical severity rating due to its potential to cause denial of service.
How do I fix CVE-2026-8122?
To fix CVE-2026-8122, upgrade Open5GS to version 2.7.8 or later, which addresses this vulnerability.
Which software versions are affected by CVE-2026-8122?
CVE-2026-8122 affects Open5GS versions up to and including 2.7.7.
What component is impacted by CVE-2026-8122?
CVE-2026-8122 specifically impacts the NSSF component in Open5GS.
What is the consequence of exploiting CVE-2026-8122?
Exploiting CVE-2026-8122 can lead to a denial of service, disrupting normal operations of the affected system.