CVE-2026-8187: Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption
A flaw has been found in Open5GS up to 2.7.7. This impacts the function gtpv1urecvcb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to resource consumption. The attack may be performed from remote. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8187?
CVE-2026-8187 is classified as a resource consumption vulnerability which can potentially lead to denial of service.
How do I fix CVE-2026-8187?
To fix CVE-2026-8187, upgrade Open5GS UPF to version 2.7.8 or later.
What versions of Open5GS UPF are affected by CVE-2026-8187?
Open5GS UPF versions up to and including 2.7.7 are affected by CVE-2026-8187.
What is the impact of exploiting CVE-2026-8187?
Exploiting CVE-2026-8187 can lead to significant resource consumption, potentially causing service disruptions.
Is CVE-2026-8187 being actively exploited in the wild?
As of now, there is no public information indicating that CVE-2026-8187 is actively being exploited in the wild.