CVE-2026-8123: Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service
A vulnerability was determined in Open5GS up to 2.7.7. This impacts the function ogssbidiscoveryoptionaddsnssais in the library /lib/sbi/message.c of the component NSSF. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8123?
The severity of CVE-2026-8123 is high as it can lead to denial of service in the Open5GS NSSF component.
How do I fix CVE-2026-8123?
To fix CVE-2026-8123, upgrade Open5GS to a version later than 2.7.7 where the vulnerability has been addressed.
Which software is affected by CVE-2026-8123?
CVE-2026-8123 affects Open5GS versions up to and including 2.7.7.
What impact does CVE-2026-8123 have on systems?
CVE-2026-8123 can cause a denial of service, disrupting the functionality of systems using Open5GS.
Is there a known exploit for CVE-2026-8123?
As of now, there are no publicly disclosed exploits for CVE-2026-8123, but the vulnerability poses a significant risk.